467 matches found
MRCGIGUY The Ticket System 2.0 - Insecure Cookie Handling
--------------------------------------------------------------- --------------------------------------------------------------- The Ticket System / The Ticket System PHP Version 2.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder :...
Sql injection
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3196
The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...
vSupport Integrated Ticket System 3.*.* SQL injection
+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...
vsupportits-sql.txt
+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...
CVE-2005-3895
Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary w...