616 matches found
CVE-2025-6890 code-projects Movie Ticketing System ticketConfirmation.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2025-6890
CVE-2025-6890 affects code-projects Movie Ticketing System 1.0. The vulnerability is an SQL injection in the /ticketConfirmation.php file caused by manipulation of the Date argument. Impact is described as high for confidentiality, integrity, and availability. The issue can be exploited remotely,...
CVE-2025-6890 code-projects Movie Ticketing System ticketConfirmation.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-6889
CVE-2025-6889 affects code-projects Movie Ticketing System 1.0. The vulnerability is in the file /logIn.php where manipulating the parameter postName triggers a SQL injection . Exploitation is described as remote with a publicly disclosed exploit, indicating potential active risk. NVD lists a CVS...
CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection
A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...
PT-2025-27414 · Code Projects · Code-Projects Movie Ticketing System
Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue affects the processing of the file "/ticketConfirmation.php". The manipulation of the Date argument leads to SQL injection. The attack may be initiated remotely...
Code-Projects Movie Ticketing System 注入漏洞
Code-Projects Movie Ticketing System is Code-Projects open source movie ticketing system. Code-Projects Movie Ticketing System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to a misuse of the parameter postName in the file /logIn.php...
PT-2025-27408 · Unknown · Code-Projects Movie Ticketing System
Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue has been discovered, affecting the /logIn.php file. The manipulation of the postName argument leads to SQL injection. This issue can be exploited remotely...
Code-Projects Movie Ticketing System 注入漏洞
Code-Projects Movie Ticketing System is an open source movie ticketing system from Code-Projects. An injection vulnerability exists in code-projects Movie Ticketing System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter Date in the file...
CVE-2025-47658
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a...
CVE-2025-47658
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System allows Upload a Web Shell to a Web Server. This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.2.7...
CVE-2024-33786
An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-54811
A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter...
CVE-2023-26958
Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Admin Name parameter...
CVE-2023-26959
Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter...
CVE-2023-3003
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...
CVE-2023-2865
A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...
CVE-2022-32302
Theme Park Ticketing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editticket.php...
CVE-2022-40049
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manageuser.php page...