CVE-2021-25209: SQL Injection
First published: Thu Jul 22 2021(Updated: )
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_user.php .
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Theme Park Ticketing System Project Theme Park Ticketing System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0?
The vulnerability ID for the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 is CVE-2021-25209.
What is the severity of CVE-2021-25209?
The severity of CVE-2021-25209 is critical with a CVSS score of 9.8.
How does the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 work?
The SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements by manipulating the 'id' parameter in the 'view_user.php' file.
How can I fix the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0?
To fix the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0, update the software to a patched version provided by the vendor or developer.
Is there any additional information available about the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0?
Yes, you can find additional information about the SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 in the reference link: https://github.com/BigTiger2020/Theme-Park-Ticketing-System/blob/main/Theme%20Park%20Ticketing%20System.md
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- agent/source
- vendor/theme park ticketing system project
- canonical/theme park ticketing system project theme park ticketing system
- version/theme park ticketing system project theme park ticketing system/1.0