18 matches found
CVE-2023-26984
CVE-2023-26984 취약점 설명: Peppermint v0.2.4의 비밀번호 재설정 기능에서 발생한 문제로, 공격자가 조작된 요청을 통해 Tickets 페이지의 이메일과 비밀번호에 접근할 수 있습니다. 공격 벡터: 공격자는 사용자 역할로 로그인한 후 비밀번호를 재설정해야 합니다. 그런 다음 트래픽을 가로채어 id를 관리자 역할이나 다른 사용자로 변경합니다. 공격자가 티켓을 생성하면 Tickets 페이지의 이메일과 비밀번호를 볼 수 있습니다. 이후 공격자는 새 비밀번호로 관리자 계정에 로그인할 수 있습니다. 영향받는 대상...
CVE-2026-5017
CVE-2026-5017 affects code-projects Simple Food Order System 1.0, specifically the Parameter Handler’s file /all-tickets.php. Affected behavior: manipulation of the Status parameter can cause SQL injection, with remote exploitation and the exploit publicly released. Remediation guidance present i...
PT-2026-28731
Name of the Vulnerable Software and Affected Versions code-projects Simple Food Order System version 1.0 Description A security flaw exists in code-projects Simple Food Order System version 1.0. The issue resides in the Parameter Handler component, specifically within the file /all-tickets.php...
EUVD-2024-55088
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...
CVE-2024-9298
A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access...
Online Railway Reservation System 访问控制错误漏洞
Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. An access control error vulnerability exists in SourceCodester Online Railway Reservation System version 1.0, which stems from an improper access control issue contained in the id...
PT-2024-39553 · Sourcecodester · Sourcecodester Online Railway Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A vulnerability was found in the Ticket Handler component, specifically affecting some unknown functionality of the file /?page=tickets. The manipulation of the id...
CVE-2024-7446
A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file listtickets.php. The manipulation of the argument prefSeatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...
Design/Logic Flaw
An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request...
CVE-2023-26984: Authorization Bypass Through User-Controlled Key
An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request...
CVE-2023-26984
An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a crafted request...
PT-2019-10964
Name of the Vulnerable Software and Affected Versions: Quest Kace K1000 Appliance versions prior to 9.0.270 Description: The issue allows an authenticated user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page. This could enable a malicious user t...
CVE-2018-5405: Improper Neutralization of Input During Web Page Generation
The Quest Kace K1000 Appliance, versions prior to 9.0.270, allows an authenticated least privileged user with 'User Console Only' rights to potentially inject arbitrary JavaScript code on the tickets page. Script execution could allow a malicious user of the system to steal session cookies of oth...
philadelphiaboxoffice.com XSS vulnerability
Vulnerable URL: https://www.philadelphiaboxoffice.com/tickets.php?/Queen-and-Adam-Lambert/Wells-Fargo-CenterPA-PA/=1"...
kansascityboxoffice.com XSS vulnerability
Vulnerable URL: https://www.kansascityboxoffice.com/tickets.php?/Naked-Magicians-18+-Event/Uptown-Theater-Kansas-City-MO/=1"...
houstonboxoffice.com XSS vulnerability
Vulnerable URL: https://www.houstonboxoffice.com/tickets.php?/Guy,-Monica,-112/Smart-Financial-Centre-TX/=1"...