CVE-2023-24201

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-06

Last modified

2025-03-26

Weaknesses

CWE-789, CWE-89

Affected products

• Raffle Draw System (Oretnom23)

References

• https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20get_ticket.php.md
• https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html