eticket-xss.txt

netVigilance Security Advisory 31 eTicket version 1.5.5 XSS Attack Vulnerability Description: eTicket is an electronic open source support ticket system based on osTicket, that can receive tickets via email pop3 or pipe and a web-based form, as well as manage them using a web interface. Successfu...

CVE-2007-2800

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the 1 name, 2 email, 3 phone, or 4 subject parameters, which reveals the installation path in the resulting error messages...

CVE-2007-2800

CVE-2007-2800 affects eTicket up to version 1.5.5.1, where index.php accepts name[], email[], phone[], or subject[] parameters and reveals the server installation path in error messages. Exploitation involves constructing requests such as index.php?name[]=… and reading path leakage in the respons...

CVE-2007-2800

index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the 1 name, 2 email, 3 phone, or 4 subject parameters, which reveals the installation path in the resulting error messages...

[Full-disclosure] eTicket version 1.5.5 Path Disclosure Vulnerability

netVigilance Security Advisory 30 eTicket version 1.5.5 Path Disclosure Vulnerability Description: eTicket is an electronic open source support ticket system based on osTicket, that can receive tickets via email pop3 or pipe and a web-based form, as well as manage them using a web interface...

[Full-disclosure] eTicket version 1.5.5 XSS Attack Vulnerability

netVigilance Security Advisory 31 eTicket version 1.5.5 XSS Attack Vulnerability Description: eTicket is an electronic open source support ticket system based on osTicket, that can receive tickets via email pop3 or pipe and a web-based form, as well as manage them using a web interface. Successfu...

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities

ETicket 1.5.5 - Open.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically...

ETicket 1.5.5 - 'Open.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24681/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary...

eTicket 1.5.5 - newticket.php Multiple Cross-Site Scripting Vulnerabilities

eTicket 1.5.5 - newticket.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27130/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically...

eTicket 1.5.5 - 'newticket.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27130/info eTicket is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrar...