OwnTicket SQL Injection Vulnerability

OwnTicket is a workflow management system. A SQL injection vulnerability exists in OwnTicket version 2018-05-23. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands with the help of 'showTicketId' or 'editTicketStatusId' parameters...

Sql injection

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...

CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter...