SQL Injection in Manantial De Ideas Infoticketing
CVE-2025-41002
SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'.
Vulnerability class: SQL Injection
EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.
Affected products
- Manantial De Ideas Infoticketing — versions all versions