27 matches found
CVE-2017-15362
osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication...
osTicket 'tickets.php' Cross-Site Scripting Vulnerability
osTicket is a widely used lightweight question return system developed in PHP. A cross-site scripting vulnerability exists in osTicket 'tickets.php' because the application fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary...
Free Hosting Manager 2.0.2 - Multiple SQLi
No description provided by source. ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors :...
Free Hosting Manager 2.0.2 - Multiple SQL Injections
Free Hosting Manager 2.0.2 - Multiple SQL Injections ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...
CVE-2005-4617
CVE-2005-4617 affects cSupport 1.0 and earlier, where tickets.php is vulnerable to SQL injection via the pg parameter. This allows remote attackers to execute arbitrary SQL commands. No remediation details are provided in the supplied documents.
