CVE-2008-5165

CVE-2008-5165 affects eTicket 1.5.7, with multiple SQL injection vulnerabilities exposed via the pri parameter to index.php, open.php, open_raw.php, and newticket.php. The root cause is unparameterized SQL handling in these PHP entry points, enabling remote attackers to modify or exfiltrate data ...