CVE-2024-12123

CVE-2024-12123 affects Issuetrak v17.1. A hidden field manipulation flaw allows an authenticated user submitting a ticket to have the request intercepted and modified via a proxy, changing the ticket requester to another user in the same application, which the app accepts. The issue is described ...

CVE-2024-12123 Unauthorized Modification of Ticket Requester

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

CVE-2024-12123 Unauthorized Modification of Ticket Requester

A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy. The ticket requester can be changed from the...

CVE-2024-11479 Authenticated HTML Injection in Issuetrak Ticket Comment Function

A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket...

CVE-2024-11479 Authenticated HTML Injection in Issuetrak Ticket Comment Function

A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket...

CVE-2024-11479

CVE-2024-11479 concerns Issuetrak 17.1. An authenticated user can inject HTML into ticket comments, which is then rendered in emails sent to all users on that ticket. The affected component is the comment handling in tickets; the root cause is HTML injection in comments. Publicly stated impact is...

PT-2024-17449 · Issuetrak · Issuetrak

Name of the Vulnerable Software and Affected Versions: Issuetrak version 17.1 Description: A hidden field manipulation issue was identified that could be triggered by an authenticated user. When an authenticated user submits a ticket, the request can be intercepted and modified by using a proxy...

Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2024-41407 · Dit +1 · Webkitgtk-4.0-Lang +63

Уязвимость OpenSUSE...

CVE-2024-11970

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11970

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11970 code-projects Concert Ticket Ordering System tour(cor).php sql injection

A vulnerability classified as critical has been found in code-projects Concert Ticket Ordering System 1.0. Affected is an unknown function of the file /tourcor.php. The manipulation of the argument mai leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-11970

The CVE-2024-11970 entry concerns code-projects Concert Ticket Ordering System version 1.0. Affected is an unknown function in the file /tour(cor).php where the mai parameter, when manipulated, leads to an SQL injection. The vulnerability can be exploited remotely, and the exploit has been disclo...

Code-Projects Concert Ticket Ordering System 注入漏洞

Code-Projects Concert Ticket Ordering System is a Code-Projects open source concert ticket ordering system. Code-Projects Concert Ticket Ordering System version 1.0 suffers from an injection vulnerability that originates from the parameter mai in the file /tourcor.php, which can lead to SQL...

PT-2024-17374 · Code Projects · Concert Ticket Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Concert Ticket Ordering System version 1.0 Description: A critical vulnerability has been found in the Concert Ticket Ordering System. It affects an unknown function of the file /tourcor.php. The manipulation of the mai argument...

CVE-2024-53855

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

CVE-2024-53855

Centurion ERP prior to 1.3.1 allows an authenticated user with certain ticket-view permissions (view_ticket_change, view_ticket_incident, view_ticket_request, view_ticket_problem) to view tickets belonging to other organizations when using the API endpoints for tickets. The UI and Project Tasks a...

CVE-2024-53855 User can view tickets from organizations they're not apart of in centurion_erp

Centurion ERP Enterprise Rescource Planning is a simple application developed to provide open source IT management with a large emphasis on the IT Service Management ITSM modules. A user who is authenticated and has view permissions for a ticket, can view the tickets of another organization they...

PT-2024-35952 · Unknown · Centurion Erp

Name of the Vulnerable Software and Affected Versions: Centurion ERP versions prior to 1.3.1 Description: A user with view permissions for a ticket can view the tickets of another organization they are not a part of, if they have specific permissions such as view ticket change, view ticket...

PT-2024-31752 · Centreon · Centreon-Open-Tickets

Name of the Vulnerable Software and Affected Versions: Centreon centreon-open-tickets versions 22.10.x through 22.10.1 Centreon centreon-open-tickets versions 23.04.x through 23.04.2 Centreon centreon-open-tickets versions 23.10.x through 23.10.0 Centreon centreon-open-tickets versions 24.04.x...