Sql injection

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

CVE-2010-4363: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY MCG FreeTicket 1.0.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 email parameters in a showtickets action...

PT-2010-5440

Name of the Vulnerable Software and Affected Versions MRCGIGUY MCG FreeTicket version 1.0.0 Description The issue allows remote attackers to execute arbitrary SQL commands due to multiple SQL injection vulnerabilities in the contact.php file. This occurs when the magic quotes gpc setting is...