CVE-2026-5554

HighCVSS 7.3

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A SQL injection vulnerability was found in Concert Ticket Reservation System 1.0 in the file process_search.php via the searching parameter. The attack can be performed remotely and the exploit is publicly available.

Risk Assessment

An attacker can remotely manipulate the database, potentially leading to data leakage or modification.

Recommendation

Immediately update the system to the latest version or apply a patch to prevent SQL injection.

Other vulnerabilities in Concert Ticket Reservation System

CVE-2026-5555High
A SQL injection vulnerability was found in Concert Ticket Reservation System 1.0 in the file login.php via the Email parameter. The attack can be performed remotely and the exploit is publicly available.

Original NVD description (English source)

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/process_search.php of the component Parameter Handler. Performing a manipulation of the argument searching results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.