CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

CNVD•added 2018/10/23 12:00 a.m.•10 views

OwnTicket SQL Injection Vulnerability

OwnTicket is a workflow management system. A SQL injection vulnerability exists in OwnTicket version 2018-05-23. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands with the help of 'showTicketId' or 'editTicketStatusId' parameters...

9.8CVSS10AI score0.01587EPSS

SaveExploits1References1

NVD•added 2018/10/19 7:29 p.m.•20 views

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

9.8CVSS10AI score0.01587EPSS

SaveExploits1References1

Prion•added 2018/10/19 7:29 p.m.•22 views

Sql injection

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

7.5CVSS9.9AI score0.01587EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2018/10/19 7:00 p.m.•25 views

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

10AI score0.01587EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2018/10/19 12:00 a.m.•2 views

CVE-2018-18527: Improper Neutralization of Special Elements used in an SQL Command

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

9.8CVSS8.2AI score0.01587EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by