CVE-2023-2865

A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file print_ticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-229821 was assigned to this vulnerability.

• CWE-89

• https://github.com/XIAONIGM/CVEReport/blob/main/SQL.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.229821Permissions Required, Third Party Advisory
• https://vuldb.com/?id.229821Permissions Required, Third Party Advisory
• https://github.com/XIAONIGM/CVEReport/blob/main/SQL.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.229821Permissions Required, Third Party Advisory
• https://vuldb.com/?id.229821Permissions Required, Third Party Advisory

Published

May 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28644Nextcloud server is an open source home cloud implementation…7.5
• CVE-2023-28645Nextcloud richdocuments is a Nextcloud app integrating the o…6.5
• CVE-2023-28646Nextcloud android is an android app for interfacing with the…2.4
• CVE-2023-28647Nextcloud iOS is an ios application used to interface with t…6.8
• CVE-2023-28648Osprey Pump Controller version 1.01 inputs passed to a GET p…6.1
• CVE-2023-28649The Hub in the Snap One OvrC cloud platform is a device used…7.5
• CVE-2023-28650An unauthenticated remote attacker could provide a malicious…6.1
• CVE-2023-28651Cross-site scripting vulnerability exists in CONPROSYS HMI S…4.8
• CVE-2023-28652An authenticated malicious user could successfully upload a …6.5
• CVE-2023-28653 The affected application lacks proper valid…7.8
• CVE-2023-28654Osprey Pump Controller version 1.01 has a hidden administrat…9.8
• CVE-2023-28655A malicious user could leverage this vulnerability to escala…5.4