CVE-2024-57430

9.8 criticalEPSS 0.9%

Critical (9.8) in phpjabbers cinema booking system. EPSS 0.9% chance of exploitation in the next 30 days.

An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-02-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

phpjabbers:cinema_booking_system

References

https://github.com/ahrixia/CVE-2024-57430
https://www.phpjabbers.com/cinema-booking-system/

Check your stack JSON