OwnTicket SQL Injection Vulnerability

OwnTicket is a workflow management system. A SQL injection vulnerability exists in OwnTicket version 2018-05-23. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands with the help of 'showTicketId' or 'editTicketStatusId' parameters...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

Sql injection

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

PT-2018-14495

Name of the Vulnerable Software and Affected Versions OwnTicket affected versions not specified Description The issue allows SQL Injection via the showTicketId or editTicketStatusId parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

CVE-2018-18527: Improper Neutralization of Special Elements used in an SQL Command

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...