EUVD-2015-4695

Malware in sbrugna...

CVE-2015-4676

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

Sql injection

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2015-4676

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2015-4676

The connected documents confirm a SQL injection vulnerability in TickFa 1.x affecting ticket.php via the tid parameter in a read action. Root cause noted as improper handling/validation of tid input, enabling remote authenticated users to execute arbitrary SQL commands against the database. This ...

PT-2015-6667

Name of the Vulnerable Software and Affected Versions TickFa versions 1.x Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the tid parameter in a "read" action, specifically targeting the ticket.php file. Recommendations For TickFa...

CVE-2015-4676: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

TickFa 1.x SQL Injection

/ + Author: Mohammad Reza Espargham + Title: TickFa 1.x - SQL Injection Vulnerability + Date: 26-04-2015 + Vendor: http://tickfa.aftab.cc/ + SoftWare Link : http://tickfa.aftab.cc/dl/tickfa.zip + Type: WebAPP + Tested on: KaliLinux Debian / curl 7.35.0 + GHDB : intext:"تیکت برای بخش مورد نظر ایجا...