Vulnerability CVE-2024-7635


Published: 2024-08-12

Description:
A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file register_insert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Type:

CWE-89

(Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://vuldb.com/?id.274056
https://vuldb.com/?ctiid.274056
https://vuldb.com/?submit.386667
https://github.com/space-security/cve/issues/2

Copyright 2026, cxsecurity.com

 

Back to Top