CVE-2007-3196

The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...

vSupport Integrated Ticket System 3.*.* SQL injection

+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...

vsupportits-sql.txt

+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...

CVE-2005-3895

Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary w...