Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is an open-source ticketing system from Enhancesoft, USA. A cross-site scripting vulnerability exists in Enhancesoft osTicket version 1.18.0, which stems from a vulnerability that allows a remote attacker to elevate privileges via a carefully crafted support ticket...

UBUNTU-CVE-2024-23791

Insertion of debug information into log file during building the elastic search index allows reading of sensitive information from articles.This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023.X through 2023.1.1...

PT-2024-2034 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 7.0.X through 7.0.48 OTRS versions 8.0.X through 8.0.37 OTRS versions 2023.X through 2023.1.1 Description: The issue is related to the handling of attachments in ticket comments, allowing another user to add attachments...

OTRS Log Information Disclosure Vulnerability

OTRS is an application from OTRS Germany. A service management software. A security vulnerability exists in OTRS that stems from the insertion of debugging information into a log file during the construction of a resilient search index allowing sensitive information to be read from it...

PHPJabbers Event Ticketing System 1.0 Missing Rate Limiting

Exploit Title: PHPJabbers Event Ticketing System v1.0 - No Rate Limit Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/meeting-room-booking-system/sectionDemo Version: v1.0 Tested on...

PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability

PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability

PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

PHPJabbers Event Ticketing System Cross-Site Scripting Vulnerability

PHPJabbers Event Ticketing System is an event ticketing system from the Serbian company PHPJabbers. A cross-site scripting vulnerability exists in PHPJabbers Event Ticketing System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

Fedora: Security Advisory (FEDORA-2023-699bd1497e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rt-5.0.5-2.fc39

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...

Fedora: Security Advisory for rt (FEDORA-2023-a2df0551fe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: rt-5.0.5-1.fc37

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...

Fedora: Security Advisory for rt (FEDORA-2023-64fe19f832)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-5421

An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field to execute JavaScript code that runs immediatly after the data is saved.The issue onlyoccurs if the configuration for AdminCustomerUser::UseAutoComplete was...

SUSE CVE-2023-38056

Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...

CVE-2023-3003

A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

Sql injection

A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

CVE-2023-3003 SourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection

A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

CVE-2023-3003

CVE-2023-3003 affects SourceCodester Train Station Ticketing System 1.0, specifically the GET parameter handler in manage_prices.php. The vulnerability arises from unsafely handling the id parameter, allowing SQL injection that can be triggered remotely. Public disclosure exists and multiple sour...

PT-2023-22515 · Sourcecodester · Train Station Ticketing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Train Station Ticketing System version 1.0 Description: A critical issue was found in the file manage prices.php of the component GET Parameter Handler. The manipulation of the id argument leads to sql injection. The attack can...