EUVD-2018-18936

Malware in sbrugna...

CVE-2016-10930

The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number...

CVE-2016-10930: Improper Input Validation

The wp-support-plus-responsive-ticket-system plugin before 7.1.0 for WordPress has insecure direct object reference via a ticket number...

PT-2019-7726

Name of the Vulnerable Software and Affected Versions wp-support-plus-responsive-ticket-system plugin versions prior to 7.1.0 Description The issue is related to an insecure direct object reference via a ticket number. Recommendations For versions prior to 7.1.0, update to version 7.1.0 or later ...

Improper access control

Chamilo Chamilo-lms version 1.11.8 and earlier contains an Incorrect Access Control vulnerability in Tickets component that can result in an authenticated user can read all tickets available on the platform, due to lack of access controls. This attack appears to be exploitable via ticketid=ticket...

Enhancesoft osTicket Denial of Service Vulnerability

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A security vulnerability exists in the ticket number generator in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit this vulnerability to cause a denial of service by sending a request to create ...

CVE-2018-7194

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...

CVE-2018-7194

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...

Integer overflow

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...

CVE-2018-7194: Integer Overflow or Wraparound

Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service preventing the creation of new tickets via a large number of digits in the ticket number format setting...

PT-2018-17940

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.10.2 Description The issue is related to an integer format vulnerability in the ticket number generator. This vulnerability allows remote attackers to cause a denial-of-service, preventing the creation of new...

CVE-2008-0523

Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2008-0523

Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2003-0303: Undefined Security Weakness

SQL injection vulnerability in one||zero aka One or Zero Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter...