high7.5
CVE-2022-40049
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the…
Impact
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manage_user.php page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Theme Park Ticketing System Project | Theme Park Ticketing System | Version 1.0 |