PT-2017-7256

Name of the Vulnerable Software and Affected Versions Support Ticket System plugin versions prior to 1.2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the user or id parameter in the includes/update.php file. Recommendations For versions...