OwnTicket SQL Injection Vulnerability

OwnTicket is a workflow management system. A SQL injection vulnerability exists in OwnTicket version 2018-05-23. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands with the help of 'showTicketId' or 'editTicketStatusId' parameters...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-8898

creationtimestamp| type| source ---|---|--- 2018-05-23 08:20:33+00:00| published-proof-of-concept| https://t.me/antichat/1492...