EUVD-2018-10252

Malware in sbrugna...

OwnTicket 1.0 Cross Site Request Forgery

Exploit Title: OwnTicket 1.0 - Cross Site Request Forgery Add Addmin Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: March 10, 2019 Vendor Homepage: https://ownticket.sourceforge.io/ Software Link : https://sourceforge.net/projects/ownticket/files/latest/downlo...

OwnTicket SQL Injection Vulnerability

OwnTicket is a workflow management system. A SQL injection vulnerability exists in OwnTicket version 2018-05-23. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands with the help of 'showTicketId' or 'editTicketStatusId' parameters...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

Sql injection

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

Summary of CVE-2018-18527 (OwnTicket): A SQL injection vulnerability exists in OwnTicket (dated 2018-05-23) allowing an attacker to inject arbitrary SQL via the showTicketId or editTicketStatusId parameters. Affected software is OwnTicket; the precise vulnerable component is not explicitly detail...

PT-2018-14495

Name of the Vulnerable Software and Affected Versions OwnTicket affected versions not specified Description The issue allows SQL Injection via the showTicketId or editTicketStatusId parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

CVE-2018-18527: Improper Neutralization of Special Elements used in an SQL Command

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

OwnTicket 1.0 SQL Injection

Exploit Title: OwnTicket 1.0 - 'TicketID' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: https://ownticket.sourceforge.io/ Software Link: https://sourceforge.net/projects/ownticket/files/latest/download Version: 1.0 Category: Webapps Tested on:...

OwnTicket 1.0 - 'TicketID' SQL Injection

Exploit Title: OwnTicket 1.0 - 'TicketID' SQL Injection Dork: N/A Date: 2018-10-18 Exploit Author: Ihsan Sencan Vendor Homepage: https://ownticket.sourceforge.io/ Software Link: https://sourceforge.net/projects/ownticket/files/latest/download Version: 1.0 Category: Webapps Tested on:...