PT-2026-30424 · Unknown · Concert Ticket Reservation System

Wenzhuolin · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5554

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Concert Ticket Reservation System version 1.0

Description A security flaw exists in code-projects Concert Ticket Reservation System 1.0. The issue is related to an unknown functionality within the /ConcertTicketReservationSystem-master/process search.php file of the Parameter Handler component. Manipulation of the searching argument results in SQL injection. The attack can be initiated remotely, and the exploit has been publicly released.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5554

Affected Products

Concert Ticket Reservation System

References · 8

• 🔥 https://github.com/Wzl731/test/issues/4 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5554 · Security Note
• https://vuldb.com/submit/782874 · Note
• https://twitter.com/CVEnew/status/2040728174925869267 · Twitter Post
• https://vuldb.com/vuln/355324/cti · Note
• https://code-projects.org · Note
• https://twitter.com/infoflowcloud/status/2040728804742594728 · Twitter Post
• https://vuldb.com/vuln/355324 · Note