463 matches found
Sql injection
Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...
CVE-2015-7670
Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...
CVE-2015-7670
CVE-2015-7670 : The WordPress Support Ticket System plugin (pre-1.2.1) is vulnerable to multiple SQL injections in includes/update.php via the (1) user and (2) id parameters. This allows remote attackers to execute arbitrary SQL commands and potentially access or modify tickets/users. The vulnera...
CVE-2015-7670
Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...
UBUNTU-CVE-2017-14635
In Open Ticket Request System OTRS 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection...
Debian DSA-3876-1 : otrs2 - security update
Joerg-Thomas Vogt discovered that the SecureMode was insufficiently validated in the OTRS ticket system, which could allow agents to escalate their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...
Open Ticket Request System Cross-Site Scripting Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...
Joomla JE Ticket System 1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...
Joomla JE Ticket System 1.2 SQL Injection
Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/je-ticket-syste...
Joomla! Component JE Ticket System 1.2 - SQL Injection
Joomla! Component JE Ticket System 1.2 - SQL Injection Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...
Joomla! Component JE Ticket System 1.2 - SQL Injection
Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/je-ticket-syste...
WordPress Plugin WP Support Plus Responsive Ticket System Elevation of Privilege Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . WordPress plugin WP Support Plus Responsive Ticket System has an elevation of privilege vulnerability that can b...
WordPress WP Support Plus Responsive Ticket System 7.1.3 Plugin - Privilege Escalation Vulnerability
Exploit for php platform in category web applications Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact:...
WordPress WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation
Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...
WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 - Privilege Escalation
Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/...
WordPress Plugin Support Plus Responsive Ticket System SQL Injection Vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the catid parameter of the admin-ajax.php page in version 7.1.3 of the...
CompTIA Information Disclosure
I was signed up CompTIA account with a fake name for a privacy reason. Later on, I wanted to update my name in CompTIA account because I was planning to take their Security+ certificate. The problem is I cannot update my name directly from the profile menu, it told me to create a support ticket...
Open Ticket Request System FAQ SQL Injection Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted by phone, email and other channels into different queues, service levels, and service personnel through the OTRS system ...
[SECURITY] Fedora 24 Update: pagure-2.3.4-1.fc24
Pagure is a light-weight git-centered forge based on pygit2. Currently, Pagure offers a web-interface for git repositories, a ticket system and possibilities to create new projects, fork existing ones and create/merge pull-requests across or within projects...
