What’s Vulnerable › Vulnerabilities

CVE-2024-57430

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-02-06 · updated 2026-06-17
• Weakness: CWE-89

Description

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.

Affected products

• PHP Jabbers Cinema Booking System: 2.0

References

• https://github.com/ahrixia/CVE-2024-57430
• https://www.phpjabbers.com/cinema-booking-system/

Get alerted when CVE-2024-57430 or the next vulnerability affects your stack