Lucene search
K

8 matches found

NVD
NVD
added 2026/05/21 6:16 p.m.11 views

CVE-2026-48215

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frmid POST parameter directly into an HTML form input value attribute. Attackers can...

5.4CVSS0.00212EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.10 views

PT-2026-42493

Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized value through the frm id POST parameter directly into an HTML form input value attribute. Attackers ca...

5.4CVSS5.8AI score0.00212EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/21 12:0 a.m.4 views

tickets 跨站脚本漏洞

Tickets is an open-source public safety scheduling and tracking application developed by Open ISES. Versions of tickets prior to 3.44.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from the circular.php file, where the frmid POST parameter was directly inserted into...

5.4CVSS5.8AI score0.00212EPSS
Exploits0References1
CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

Small CRM manage-tickets.php file SQL Injection Vulnerability

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

6.5CVSS8.3AI score0.0021EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/11/18 12:11 a.m.7 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS8.1AI score0.0021EPSS
Exploits1References1
OSV
OSV
added 2025/11/17 5:15 p.m.1 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

6.5CVSS5.8AI score0.0021EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/17 12:0 a.m.4 views

CVE-2024-44644

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...

0.0021EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.2 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the frmid and aremark parameters of manage-tickets.php. An attacker can exploit this vulnerability to execu...

6.5CVSS8.2AI score0.0021EPSS
Exploits1References3
Rows per page
Query Builder