17 matches found
EUVD-2018-10630
Malware in sbrugna...
EUVD-2018-10629
Malware in sbrugna...
AbiSoft Ticketly SQL Injection Vulnerability
AbiSoft Ticketly is a PHP and MySQL based ticketing software from AbiSoft in the Republic of Guatemala. A SQL injection vulnerability exists in AbiSoft Ticketly version 1.0, which can be exploited by remote attackers to execute arbitrary SQL commands with the help of multiple parameters...
CVE-2018-18923
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, categoryid and description in action/addproject.php; kindid, priorityid, projectid, statusid and title in action/addticket.php; and kindid and statusid in reports.php...
Sql injection
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, categoryid and description in action/addproject.php; kindid, priorityid, projectid, statusid and title in action/addticket.php; and kindid and statusid in reports.php...
CVE-2018-18922
adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...
Cross site request forgery (csrf)
adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...
CVE-2018-18923
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, categoryid and description in action/addproject.php; kindid, priorityid, projectid, statusid and title in action/addticket.php; and kindid and statusid in reports.php...
CVE-2018-18922
adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...
CVE-2018-18922
adduser in AbiSoft Ticketly 1.0 allows remote attackers to create administrator accounts via an action/adduser.php POST request...
CVE-2018-18923
CVE-2018-18923 is an authenticated SQL Injection issue affecting AbiSoft Ticketly 1.0. Concrete details across connected records show injections in multiple endpoints: action/addproject.php (name, category_id, description), action/addticket.php (kind_id, priority_id, project_id, status_id, title)...
CVE-2018-18922
CVE-2018-18922 affects AbiSoft Ticketly 1.0. A POST to /action/add_user.php without authentication lets remote attackers create administrator accounts, enabling privilege escalation. Public references document PoCs and exploits (e.g., Exploit-DB entry 45892; other sources). The available data con...
CVE-2018-18923
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, categoryid and description in action/addproject.php; kindid, priorityid, projectid, statusid and title in action/addticket.php; and kindid and statusid in reports.php...
PT-2018-14723
Name of the Vulnerable Software and Affected Versions AbiSoft Ticketly version 1.0 Description The issue affects AbiSoft Ticketly through multiple SQL Injection vulnerabilities. These vulnerabilities are found in the parameters name, category id, and description in the "action/addproject.php"...
PT-2018-14722
Name of the Vulnerable Software and Affected Versions AbiSoft Ticketly version 1.0 Description The issue allows remote attackers to create administrator accounts. This can be achieved via an action/add user.php POST request, specifically exploiting the add user functionality. Recommendations For...
CVE-2018-18923: Improper Neutralization of Special Elements used in an SQL Command
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, categoryid and description in action/addproject.php; kindid, priorityid, projectid, statusid and title in action/addticket.php; and kindid and statusid in reports.php...