Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the deleteticket.php page...

CVE-2023-24200

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...

CVE-2023-24202

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

PT-2023-19475

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "save ticket.php" endpoint. Recommendations For Raffle Draw System version 1.0,...

PT-2023-19472

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "save winner.php" endpoint via the ticket id and draw parameters. Recommendations For Raffle Draw...

PT-2023-19476

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "get ticket.php" endpoint. Recommendations For Raffle Draw System version 1.0,...

CVE-2023-24200

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...

PT-2023-19477

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue is related to a local file inclusion vulnerability. This vulnerability can be exploited via the page parameter in the "index.php" endpoint. Recommendations For Raffle Draw System version 1.0...

Raffle Draw System 代码问题漏洞

Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from a local file inclusion issue in the page parameter of the index.php page...

CVE-2023-24202

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

CVE-2023-24198

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

CVE-2023-24202: Unrestricted Upload of File with Dangerous Type

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple draw system by Carlo Montero, a personal developer. A security vulnerability exists in Raffle Draw System, which stems from an SQL injection issue in the ticketid and draw parameters of the savewinner.php page...

CVE-2023-24198

CVE-2023-24198 affects Raffle Draw System v1.0 through multiple SQL injection flaws in save_winner.php, exploitable via the ticket_id and draw parameters. The underlying cause is unsafe SQL construction for these inputs, leading to potential data disclosure, modification, or denial of service (pe...

CVE-2023-24201

CVE-2023-24201 affects Raffle Draw System v1.0. The connected documents confirm a SQL injection vulnerability exploitable via the id parameter in get_ticket.php, leading to high-severity impact across confidentiality, integrity, and availability (CVSS v3.1: 9.8, NETWORK, NONE/LOW conditions). The...

CVE-2023-24199: Improper Neutralization of Special Elements used in an SQL Command

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

CVE-2023-24200

CVE-2023-24200 affects Raffle Draw System v1.0. The vulnerability is a SQL injection via the id parameter in save_ticket.php, with affected component/entry point identified in multiple sources. According to CVSS 3.1 metrics, it is a CRITICAL (9.8) impact across confidentiality, integrity, and ava...

PT-2023-19473

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "delete ticket.php" endpoint. Recommendations For Raffle Draw System version 1.0,...

CVE-2023-24201

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at getticket.php...

CVE-2023-24198: Improper Neutralization of Special Elements used in an SQL Command

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...