CRITICAL🇵🇱 Wersja polska

CVE-2023-24198

CVSS 9.8v3.1pub. 2023-02-06upd. 2025-03-26

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oretnom23 Raffle Draw System

    APP
    Oretnom23
    1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-24199CRITICAL9.8ten sam produkt

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete...

CVE-2023-24200CRITICAL9.8ten sam produkt

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_t...

CVE-2023-24201CRITICAL9.8ten sam produkt

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ti...

CVE-2023-24202CRITICAL9.8ten sam produkt

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter ...

CVE-2026-30530CRITICAL9.8PL ✓ten sam vendor

SQL Injection w Online Food Ordering System — parametr username