CVE-2025-41002 - SQL injection in Infoticketing

CVE ID : CVE-2025-41002 Published : Feb. 23, 2026, 9:30 a.m. | 40 minutes ago Description : SQL injection vulnerability in Infoticketing. This vulnerability allows an unauthenticated attacker to retrieve, create, update, and delete the database by sending a POST request using the 'code' parameter in '/components/cart/cartApplyDiscount.php'. Severity: 9.3 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...