CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-7636 – code-projects Simple Ticket Booking Login authenticate.php sql injection
https://notcve.org/view.php?id=CVE-2024-7636
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file authenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack can be launched remotely. • https://github.com/space-security/cve/issues/1 https://vuldb.com/?ctiid.274057 https://vuldb.com/?id.274057 https://vuldb.com/?submit.386671 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2024-7635 – code-projects Simple Ticket Booking Registration register_insert.php sql injection
https://notcve.org/view.php?id=CVE-2024-7635
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_insert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql injection. It is possible to launch the attack remotely. • https://github.com/space-security/cve/issues/2 https://vuldb.com/?ctiid.274056 https://vuldb.com/?id.274056 https://vuldb.com/?submit.386667 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2024-6745 – code-projects Simple Ticket Booking Login adminauthenticate.php sql injection
https://notcve.org/view.php?id=CVE-2024-6745
A vulnerability classified as critical has been found in code-projects Simple Ticket Booking 1.0. Affected is an unknown function of the file adminauthenticate.php of the component Login. The manipulation of the argument email/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/xzyxiaohaha/cve/issues/2 https://vuldb.com/?ctiid.271476 https://vuldb.com/?id.271476 https://vuldb.com/?submit.374770 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •