63 matches found
CVE-2024-5860 Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
The Tickera – WordPress Event Ticketing plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the tcdldeletetickets AJAX action in all versions up to, and including, 3.5.2.8. This makes it possible for authenticated attackers, with Subscriber-level...
PHPJabbers Event Ticketing System 1.0 Missing Rate Limiting
Exploit Title: PHPJabbers Event Ticketing System v1.0 - No Rate Limit Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/meeting-room-booking-system/sectionDemo Version: v1.0 Tested on...
PHPJabbers Event Ticketing System 1.0 Cross Site Scripting / HTML Injection
Exploit Title: PHPJabbers Event Ticketing System v1.0 - Multiple HTML Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/event-ticketing-system/sectionDemo Version: v1.0 Test...
PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability
PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...
PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability
PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...
PHPJabbers Event Ticketing System Security Vulnerability
PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A security vulnerability exists in PHPJabbers Event Ticketing System version 1.0, which stems from the presence of a lost rate limit vulnerability...
PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability
PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...
PHPJabbers Event Ticketing System Script 1.0 Cross Site Scripting
┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...
Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure
Due to missing authorization controls in the "admininit" hooks, all personal data from registered users of an event could be exported into a downloadable PDF file by every unauthenticated user. The event ID could be read from the page source and/or easily enumerated in sequence. According to the...
Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure
Due to missing authorization controls in the "admininit" hooks, all personal data from registered users of an event could be exported into a downloadable PDF file by every unauthenticated user. The event ID could be read from the page source and/or easily enumerated in sequence. According to the...
CVE-2016-10763
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body...
CVE-2016-10762
The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used...
CVE-2016-10763
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body...
Design/Logic Flaw
The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used...
Design/Logic Flaw
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body...
CVE-2016-10762
CVE-2016-10762 concerns the CampTix Event Ticketing WordPress plugin. The connected documents confirm that versions before 1.5 are vulnerable to CSV injection when using the export tool, arising from a CSV injection flaw in the plugin’s export functionality. The impact is described as CSV injecti...
CVE-2016-10763
CVE-2016-10763 affects the CampTix Event Ticketing WordPress plugin prior to version 1.5, enabling stored XSS in the admin area via a ticket title or body. Root cause: improper handling of input in ticket fields leads to script execution. Affected product: CampTix plugin for WordPress (pre-1.5). ...
CVE-2016-10763
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body...