PHP Support Tickets Detection

This host is running PHP Support Tickets, a PHP5 / MySQL helpdesk system. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Support Tickets 'page' Parameter Remote PHP Code Execution Vulnerability - Active Check

PHP Support Tickets is prone to a vulnerability that lets remote attackers execute arbitrary code because the application fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

PHP Support Tickets 2.2 - Code Execution

PHP Support Tickets 2.2 - Code Execution Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ===================================================================...

PHP Support Tickets 2.2 Code Execution

Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ==================================================================== Vuln. code: /classes/GUI/abstract.GUI.p...

PHP Support Tickets 2.2 - Code Execution

Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ==================================================================== Vuln. code: /classes/GUI/abstract.GUI.p...

PHP Support Tickets v2.2 Code Exec

Exploit for php platform in category web applications Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2...

Invitation for DEF-CON Chennai (DC602028) Meet

Invitation for DEF-CON Chennai DC602028 Meet We like to invite all the Like Minded People, who are interested in Cyber Security to attend the meet. We are DEF-CON registered Group. Our Group ID is DC602028 Tickets for the Meet We have very limited tickets for the DEF-CON ChennaiDC602028 Meet. For...

Invitation for DEF-CON Chennai (DC602028) Meet

Invitation for DEF-CON Chennai DC602028 Meet We like to invite all the Like Minded People , who are interested in Cyber Security to attend the meet. We are DEF-CON registered Group. Our Group ID is DC602028 Tickets for the Meet We have very limited tickets for the DEF-CON ChennaiDC602028 Meet. Fo...

DerbyCon 2011 Security Conference - Louisville, Kentucky

DerbyCon 2011 Security Conference - Louisville, Kentucky Welcome to a new age in security conferences, a new beginning, and a new way to share in the information security space. Our goal is to create a fun environment where the security community can come together and share ideas. Before we even...

Tickets 2.13 SQL Injection Vulnerability

No description provided by source. !------------------------------------------------------------------------ Software................Tickets 2.13 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.ticketscad.org/ Discovery...

Tickets 2.13 - SQL Injection

Tickets 2.13 - SQL Injection ------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

Tickets 2.13 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell...

Tickets 2.13 SQL Injection

------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

DerbyCon Security Conference 2011

We are happy to announce that Offensive Security will be sponsoring DerbyCon. DerbyCon is a new hacker conference located in Louisville Kentucky. Our goal is to bring back an old style, community driven hacker con chocked full of amazing talks, live events and all around fun. The idea for DerbyCo...

DEBIAN-CVE-2010-4767

Open Ticket Request System OTRS before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service duplicate tickets and duplicate auto-response...

CVE-2008-7283

Open Ticket Request System OTRS before 2.2.6, when customer group support is enabled, allows remote authenticated users to bypass intended access restrictions and perform web-interface updates to tickets by leveraging queue read permissions...

CVE-2010-4765

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

DEBIAN-CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

DEBIAN-CVE-2008-7279

The CustomerInterface component in Open Ticket Request System OTRS before 2.2.8 allows remote authenticated users to bypass intended access restrictions and access tickets of arbitrary customers via unspecified vectors...

CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...