SQL Injection Vulnerability in Raffle Draw System by Vendor
CVE-2023-24200

9.8CRITICAL

Key Information:

Vendor

Oretnom23

Status
Raffle Draw System
Vendor
CVE Published:
6 February 2023

What is CVE-2023-24200?

The Raffle Draw System version 1.0 has been identified to have a SQL injection vulnerability, specifically through the id parameter accessed in the save_ticket.php file. This flaw allows malicious actors to execute arbitrary SQL queries, potentially compromising the database integrity and leading to unauthorized data manipulation or exposure.

References

https://www.sourcecodester.com/php/15951/raffle-draw-syst...
https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%2...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.