EUVD-2010-4468

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...

PT-2010-5505

Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands via the name, email, subject, and message parameters in a "sendmess" action when magic quotes gpc is disabled. Recommendation...

CVE-2010-4500: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 email, 3 subject, and 4 message parameters in a sendmess action. NOTE: the provenance of this...