CVE-2024-7445

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file checkout_ticket_save.php. The manipulation of the argument data leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-273530 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
itsourcecode	Ticket Reservation System	1.0
itsourcecode	alton_management_system	1.0

References

https://github.com/DeepMountains/Mirage/blob/main/CVE10-2.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.273530Permissions Required, Third Party Advisory
https://vuldb.com/?id.273530Third Party Advisory
https://vuldb.com/?submit.383644Third Party Advisory

Timeline

Published: Aug 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-74467.2A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of CVE-2024-74475.3The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to un CVE-2024-74488.0Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execut CVE-2024-74499.8A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown functio CVE-2024-74508.8A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is CVE-2024-74519.8A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2024-74529.8A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part CVE-2024-74534.8A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects unknown code of the f CVE-2024-74549.8A vulnerability, which was classified as critical, has been found in SourceCodester Clinics Patient Management System 1.0. Affected by this CVE-2024-74559.8A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part o CVE-2024-74569.8A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the CVE-2024-74577.8The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of valid