Oretnom23 Raffle Draw System — known CVE vulnerabilities

Every CVE whose affected-product data names Oretnom23 Raffle Draw System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-24198 — CVSS 9.8 (critical): Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw…
• CVE-2023-24199 — CVSS 9.8 (critical): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.
• CVE-2023-24200 — CVSS 9.8 (critical): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
• CVE-2023-24201 — CVSS 9.8 (critical): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
• CVE-2023-24202 — CVSS 9.8 (critical): Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.