ORETNOM23 Raffle Draw System vulnerabilities

5 CVEs affecting ORETNOM23 Raffle Draw System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-24202, published 2023-02-06.

More from ORETNOM23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-24202, published 2023-02-06. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.
• CVE-2023-24201, published 2023-02-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
• CVE-2023-24200, published 2023-02-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
• CVE-2023-24199, published 2023-02-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.
• CVE-2023-24198, published 2023-02-06. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.