UBUNTU-CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

Znuny 安全漏洞

Znuny is a work order system from Znuny, Inc. A security vulnerability exists in Znuny versions prior to 7.1.4 that stems from insufficient permission checking when updating ticket metadata using a common interface...

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2025-26846

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2025-26846

Znuny versions prior to 7.1.4 are vulnerable to a missing authorization issue in the Generic Interface component. The software fails to properly check permissions when updating ticket metadata, which could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of ...

CVE-2025-26846: Missing Authorization

An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata...

CVE-2025-4492

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4492 Campcodes Online Food Ordering System ticket-message.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4492

CVE-2025-4492 concerns Campcodes Online Food Ordering System 1.0, where manipulation of the argument in /routers/ticket-message.php leads to a SQL injection. The vulnerability (remote- exploitable) arises from improper handling of the ticket_id parameter, with multiple connected sources confirmin...

CVE-2025-4490

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4491

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4491 Campcodes Online Food Ordering System ticket-status.php sql injection

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from an SQL injection caused by the operation of the ticketid parameter in the file...

CampCodes Online Food Ordering System 安全漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by SQL injection due to the operation of the ticketid parameter in the file...

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in CampCodes Online Food Ordering System version 1.0, which originates from SQL injection due to parameter ID manipulation in file /view-ticket-admin.php...

CVE-2025-4492: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Food Ordering System 1.0. This issue affects some unknown processing of the file /routers/ticket-message.php. The manipulation of the argument ticketid leads to sql injection. The attack may be initiated remotel...

CVE-2025-4491: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticketid leads to sql injection. The attack can be initiated remotely. The exploit has be...

CVE-2025-4490: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unknown part of the file /view-ticket-admin.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

DEBIAN-CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...

CVE-2025-26842

An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content of S/MIME encrypted e-mail messages is visible to users with access to the CommunicationLog...