CVE-2024-57430 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the…
Critical CVSS: 9.8

CVE-2024-57430

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.
Vendor
Phpjabbers
Product
Cinema Booking System
CWE
CWE-89
Yayın Tarihi
2025-02-06 17:15:20
Güncelleme
2025-06-24 00:12:38
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Cinema Booking System CRITICAL Phpjabbers 2025

Referanslar

https://github.com/ahrixia/CVE-2024-57430 https://www.phpjabbers.com/cinema-booking-system/