Sql injection

2006-03-2901:06:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

JSON

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.

CPENameOperatorVersion
php_ticketeq0.6
php_ticketle0.71
php_ticketeq0.5

Name	Operator	Version
php_ticket	eq	0.6
php_ticket	le	0.71
php_ticket	eq	0.5

References

secunia.com/advisories/19412

www.securityfocus.com/bid/17229

www.vupen.com/english/advisories/2006/1106

exchange.xforce.ibmcloud.com/vulnerabilities/25436

www.exploit-db.com/exploits/1609