CVE-2007-3547

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

Directory traversal

Directory traversal vulnerability in qticheckname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local files a .. dot dot in the lang parameter...

CVE-2007-3547

CVE-2007-3547 describes a directory traversal vulnerability in QuickTicket 1.2. The flaw is in the PHP script qti_checkname.php , where an attacker can influence the lang parameter (using dot-dot sequences) to cause local file inclusion and arbitrary code execution. This is a remote vulnerability...

QuickTicket multiple sql inj.

QuickTicket multiple sql inj. Vuln. discovered by : r0t Date: 27 June 2007 vendor:http://www.qt-cute.org/ orginal advisory: http://pridels-team.blogspot.com/2007/06/quickticket-multiple-sql-inj.html affected versions: tested on QuickTicket 1.2 build:20070621 other versions also can be affected...

QuickTicket 1.2 (qti_checkname.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== QuickTicket 1.2 qticheckname.php Local File Inclusion Vulnerability ====================================================================== QuickTicket v1.2 Local File...

QuickTicket 1.2 - qti_checkname.php Local File Inclusion

QuickTicket 1.2 - qticheckname.php Local File Inclusion QuickTicket v1.2 Local File Inclusion download: http://www.qt-cute.org/download/qti12.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploit:...