Security Advisory

CVE-2024-57430

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-02-06 00:00:00
Last updated 2025-02-06 21:23:45
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.