Adaltech G-Ticket SQL Injection Vulnerability

Adaltech G-Ticket is a ticket validation system. A SQL injection vulnerability exists in Adaltech G-Ticket version 70 EME104. A remote attacker can exploit this vulnerability by sending the 'evecod' parameter to the mobile-loja/mensagem.asp file to execute SQL commands...

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

PT-2018-9800

Name of the Vulnerable Software and Affected Versions: Adaltech G-Ticket version v70 EME104 Description: The issue is related to SQL Injection, which can be exploited via the eve cod parameter in the "mobile-loja/mensagem.asp" endpoint. Recommendations: For Adaltech G-Ticket version v70 EME104,...