Lucene search
+L

37 matches found

Positive Technologies
Positive Technologies
added 2023/01/06 12:00 a.m.11 views

PT-2023-13746 · Sourcecodester · Theme Park Ticketing System

Name of the Vulnerable Software and Affected Versions: sourcecodester Theme Park Ticketing System version 1.0 Description: The issue allows remote attackers to view sensitive information. This is achieved via the id parameter to the "/tpts/manage user.php" API endpoint. Recommendations: For...

7.5CVSS6.5AI score0.0098EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/06/17 12:00 a.m.48 views

Sourcecoester Theme Park Ticketing System SQL注入漏洞

Sourcecoester Theme Park Ticketing System is an application. A simple PHP/MySQLi project that helps manage and generate tickets for theme park or amusement park visitors. sourcecoester Theme Park Ticketing System v1.0 is vulnerable to a SQL injection vulnerability, which stems from a missing...

8.8CVSS1.9AI score0.00941EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/15 5:15 p.m.3 views

CVE-2022-32302

Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...

8.8CVSS5.7AI score0.00941EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/15 5:15 p.m.18 views

CVE-2022-32302

Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...

8.8CVSS0.00941EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/15 5:15 p.m.13 views

CVE-2022-32302

Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...

8.8CVSS5.8AI score0.00941EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/15 5:15 p.m.17 views

Sql injection

Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...

6.5CVSS8.9AI score0.00941EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/15 4:21 p.m.62 views

CVE-2022-32302

CVE-2022-32302 affects Theme Park Ticketing System v1.0. The vulnerability is a SQL injection in edit_ticket.php triggered by the id parameter, caused by unsanitized input in the SQL statement. Public sources (NVD) report high impact (C, I, A high) with CVSS v3.1 base score 8.8 and network access...

8.8CVSS8.9AI score0.00941EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/15 4:21 p.m.25 views

CVE-2022-32302

Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...

9.2AI score0.00941EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/15 12:00 a.m.8 views

Theme Park Ticketing System SQL注入漏洞

Sourcecoester Theme Park Ticketing System is an application. A simple PHP/MySQLi project that helps manage and generate tickets for theme park or amusement park visitors. sourcecoester Theme Park Ticketing System v1.0 is vulnerable to a SQL injection vulnerability, which stems from a missing...

8.8CVSS6.1AI score0.00941EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/07/24 12:00 a.m.53 views

SourceCodester Theme Park Ticketing System SQL Injection Vulnerability

SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...

9.8CVSS8.4AI score0.01279EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/22 8:15 p.m.7 views

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

9.8CVSS6.1AI score0.01279EPSS
SaveExploits0References1
NVD
NVD
added 2021/07/22 8:15 p.m.28 views

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

9.8CVSS0.01279EPSS
SaveExploits0References1
Prion
Prion
added 2021/07/22 8:15 p.m.17 views

Sql injection

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

7.5CVSS9.8AI score0.01279EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/22 7:05 p.m.35 views

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

10AI score0.01279EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/22 7:05 p.m.70 views

CVE-2021-25209

The CVE-2021-25209 entry corresponds to a SQL injection vulnerability in SourceCodester Theme Park Ticketing System v1.0. The flaw arises from insufficient validation of the id parameter in view_user.php, enabling remote attackers to execute arbitrary SQL statements. Affected software is the Them...

9.8CVSS9.8AI score0.01279EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.8 views

sourcecoester Theme Park Ticketing System SQL注入漏洞

SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...

9.8CVSS6.4AI score0.01279EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/05/14 12:00 a.m.4 views

SQL Injection Vulnerability in Theme Park Ticketing System

Theme Park Ticketing System is a system developed using PHP and MySQLi to help manage and generate tickets for visitors in a theme park or amusement park. The Theme Park Ticketing System suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive informatio...

7.5AI score
SaveExploits0
Rows per page
Query Builder