CVE-2024-57430

critical · 9.8

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.

9.8

CVSS

0.9%

EPSS (exploit prob.)

57th

EPSS percentile

2025-02-06

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
phpjabbers	cinema_booking_system	2.0

Check a specific version with /api/v1/cve/match.

References

https://github.com/ahrixia/CVE-2024-57430
https://www.phpjabbers.com/cinema-booking-system/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-57430