Net-Billetterie Billetterie vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Net-Billetterie Billetterie: 1 record(s), with affected versions and fixes.

CVE-2018-25167 High · 8.2 CWE-89 Mar 6, 2026

Net-Billetterie 2.9 SQL Injection via login.inc.php

Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit malicious SQL code through the login POST parameter to extract database information including usernames, passwords, and system credentials.