CRITICAL🇵🇱 Wersja polska

CVE-2023-24201

CVSS 9.8v3.1pub. 2023-02-06upd. 2025-03-26

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Oretnom23 Raffle Draw System

    APP
    Oretnom23
    1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2023-24198CRITICAL9.8PL ✓same product

SQL injection w Raffle Draw System v1.0 — plik save_winner.php

CVE-2023-24199CRITICAL9.8PL ✓same product

SQL injection w Raffle Draw System v1.0 – parametr id w delete_ticket.php

CVE-2023-24200CRITICAL9.8PL ✓same product

SQL Injection w Raffle Draw System v1.0 — parametr id w save_ticket.php

CVE-2023-24202CRITICAL9.8PL ✓same product

Local File Inclusion w Raffle Draw System v1.0 (parametr page)

CVE-2026-30530CRITICAL9.8PL ✓same vendor

SQL Injection w Online Food Ordering System — parametr username