NetSight
critical9.8

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id paramet…

Impact

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_user.php .

Affected products

VendorProductAffected versions
Theme Park Ticketing System ProjectTheme Park Ticketing System
Version 1.0

Weakness classification

References