CVE-2026-5555

HighCVSS 7.3

Published: 05/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

A SQL injection vulnerability was found in Concert Ticket Reservation System 1.0 in the file login.php via the Email parameter. The attack can be performed remotely and the exploit is publicly available.

Risk Assessment

An attacker can remotely manipulate the database, potentially leading to data leakage or modification.

Recommendation

Immediately update the system to the latest version or apply a patch to prevent SQL injection.

Other vulnerabilities in Concert Ticket Reservation System

CVE-2026-5554High
A SQL injection vulnerability was found in Concert Ticket Reservation System 1.0 in the file process_search.php via the searching parameter. The attack can be performed remotely and the exploit is publicly available.

Original NVD description (English source)

A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.