CVE-2008-0266

Cross-site request forgery CSRF vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection...

CVE-2008-0093

Multiple cross-site scripting XSS vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the 1 Name and 2 Subject parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the 1 Name and 2 Subject parameters...

CVE-2008-0093

Multiple cross-site scripting XSS vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the 1 Name and 2 Subject parameters...

CVE-2008-0093

CVE-2008-0093 refers to multiple cross-site scripting (XSS) vulnerabilities in the web application eTicket, specifically in the script newticket.php. The affected versions are eTicket 1.5.5.2 and 1.5.6 RC2/RC3. The vulnerability allows remote attackers to inject arbitrary web script or HTML via t...

eTicket 1.5.5.2 Multiple Vulnerabilities

====================================================================== eTicket 1.5.5.2 Multiple Vulnerabilities ====================================================================== Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting Cross Site Request Forgery SQL Injection Status:...

eTicket 1.5.5.2 - admin.php Multiple SQL Injections

eTicket 1.5.5.2 - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issue...

eTicket 1.5.5.2 - 'view.php?s' Cross-Site Scripting

source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an...

eTicket 1.5.5.2 - 'admin.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an...

eTicket 1.5.5.2 - view.php?s Cross-Site Scripting

eTicket 1.5.5.2 - view.php?s Cross-Site Scripting source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues,...

eTicket 1.5.5.2 - 'admin.php' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an...

eTicket 1.5.5.2 - search.php Multiple SQL Injections

eTicket 1.5.5.2 - search.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection...

eticket-multi.txt

====================================================================== eTicket 1.5.5.2 Multiple Vulnerabilities ====================================================================== Author: L4teral Impact: Cross Site Scripting Cross Site Request Forgery SQL Injection Status: patch not available...

eTicket 1.5.5.2 - admin.php Cross-Site Request Forgery

eTicket 1.5.5.2 - admin.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection...

eTicket 1.5.5.2 - 'search.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/27173/info eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an...

eTicket v.1.5.1.1 Multiple Cross-Site Scripting

eTicket v.1.5.1.1 Multiple Cross-Site Scripting Author: Attila Gerendi Darkz Date: June 29, 2007 Package: eTicket http://eticket.sourceforge.net/ Versions Affected: v.1.5.1.1 Other versions may also be affected Severity: XSS Input passed to "$SERVER'REQUESTURI'" in various scrips and includes is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 err and 2 warn parameters. NOTE: the vendor disputes the significance of the issue, stating that...

CVE-2007-2801

Multiple cross-site scripting XSS vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 err and 2 warn parameters. NOTE: the vendor disputes the significance of the issue, stating that...

CVE-2007-2801

CVE-2007-2801 affects eTicket 1.5.5 and 1.5.5.1. The issue is a cross-site scripting (XSS) vulnerability in open.php exploitable when PHP register_globals is On, allowing remote attackers to inject script via the err and warn parameters. Root cause is improper handling of user-supplied inputs und...

CVE-2007-2801

Multiple cross-site scripting XSS vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 err and 2 warn parameters. NOTE: the vendor disputes the significance of the issue, stating that...