CRITICAL🇵🇱 Wersja polska

CVE-2023-24198

CVSS 9.8v3.1pub. 2023-02-06upd. 2025-03-26

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oretnom23 Raffle Draw System

    APP
    Oretnom23
    1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-24199CRITICAL9.8PL ✓same product

SQL injection w Raffle Draw System v1.0 – parametr id w delete_ticket.php

CVE-2023-24200CRITICAL9.8PL ✓same product

SQL Injection w Raffle Draw System v1.0 — parametr id w save_ticket.php

CVE-2023-24201CRITICAL9.8PL ✓same product

SQL injection w Raffle Draw System v1.0 – parametr id w get_ticket.php

CVE-2023-24202CRITICAL9.8PL ✓same product

Local File Inclusion w Raffle Draw System v1.0 (parametr page)

CVE-2026-30530CRITICAL9.8PL ✓same vendor

SQL Injection w Online Food Ordering System — parametr username