Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm94-xrhg-42m4

Опубликовано: 23 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'.

SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'.

EPSS

Процентиль: 24%
0.00323
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89

Связанные уязвимости

nvd
6 месяцев назад

SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'.

EPSS

Процентиль: 24%
0.00323
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-89