Trouble Ticket Software - ttx.cgi Arbitrary File Download

Trouble Ticket Software - ttx.cgi Arbitrary File Download Exploit Title: Trouble Ticket Software 0Day Date: 3/12/2010 Author: n01d Software Link: http://www.troubleticketexpress.com Version: TTX v3.0.640 Tested on: =3.0.640 / \ / | | | | ' \ | | | || | / | | | | || || || || | | || || / || ,| Bob...

Trouble Ticket Express fid Parameter Arbitrary Remote Code Execution

The remote host is running Trouble Ticket Express, an open source web-based trouble ticket application written in Perl. At least one module included with the version of Trouble Ticket Express hosted on the remote web server fails to sanitize input to the 'fid' parameter of the 'ttx.cgi' script...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

CVE-2010-0963

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

CVE-2010-0963

The CVE-2010-0963 entry documents a Cross-site Scripting (XSS) vulnerability in the index.php of the dl Download Ticket Service prior to version 0.7, where an attacker can inject arbitrary web script or HTML via the t parameter (linked to an invalid ticket ID). Affected: dl Download Ticket Service

CVE-2010-0963

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

CVE-2010-0963: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in dl Download Ticket Service before 0.7 allows remote attackers to inject arbitrary web script or HTML via the t parameter, related to an invalid ticket ID. NOTE: some of these details are obtained from third party information...

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE :...

Trouble Ticket Express <= 3.01 Remote Code Execution

Exploit for unknown platform in category web applications ======================================================================== Trouble Ticket Express print get $url . '?cmd=file&fn=|' . $ . '|' ; print '$ '; 0day.today 2018-01-03...

Trouble Ticket Express 3.01 - Remote Code Execution / Directory Traversal

Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE : Code: This is only possible if an attachment input is available. Directory...

Code injection

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4674

The CVE-2009-4674 entry affects Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script. The flaw in admin/admin.php allows remote attackers to change an arbitrary password by modifying a user_id field, indicating an authentication/configuration weakness in the user management func...

CVE-2009-4674: Undefined Security Weakness

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

Hackers Indicted in $25 Million Ticket Scheme

A ring of ticket brokers has been indicted in connection to an elaborate hacking scheme that used bots and other fraudulent means to purchase more than 1 million tickets for concerts, sporting events and other events. The defendants made more than $25 million in profits from the resale of the...

Joomla Live Ticket Blind SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comliveticker "viewticker" Joomla comliveticker tid Blind SQL Injection Exploit x Usage: Snakespc.php "http://url/index.php?option=comliveticker&task=viewticker&tid=1" '; if $argc 1 $url = $argv1; $r...

Debian DSA-1944-1 : request-tracker3.4 request-tracker3.6 - session hijack

Mikal Gule discovered that request-tracker, an extensible trouble-ticket tracking system, is prone to an attack, where an attacker with access to the same domain can hijack a user's RT session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-1993-1 : otrs2 - sql injection

It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise input data that is used on SQL queries, which might be used to inject arbitrary SQL to, for example, escalate privileges on a system that uses otrs2. The oldstable distribution etch is not affected...

DEBIAN-CVE-2010-0283

The Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service assertion failure and daemon crash via an invalid 1 AS-REQ or 2 TGS-REQ request...

Null pointer dereference

The Key Distribution Center KDC in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service NULL pointer dereference and domain controll...