CVE-2024-57430

n/a / n/a PUBLISHED

Description (CNA)

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.phpjabbers.com/cinema-booking-system/
https://github.com/ahrixia/CVE-2024-57430

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.