Lucene search
+L

471 matches found

CNVD
CNVD
added 2018/03/27 12:00 a.m.12 views

Pradeep Makone wordpress Support Plus Responsive Ticket System SQL Injection Vulnerability

WordPress is a suite of blogging platforms from the WordPress Software Foundation developed using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Pradeep Makone wordpress Support Plus Responsive Ticket System is a set of Responsive Ticket System for...

9.8CVSS8.1AI score0.02052EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/03/14 1:00 p.m.34 views

CVE-2018-1000131

Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...

9.9AI score0.02052EPSS
SaveExploits1References3
OSV
OSV
added 2018/03/04 8:29 p.m.15 views

DEBIAN-CVE-2018-7567

In the Admin Package Manager in Open Ticket Request System OTRS 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server...

7.2CVSS7.4AI score0.05204EPSS
SaveExploits3References1
CNVD
CNVD
added 2017/12/26 12:00 a.m.11 views

Open Ticket Request System Session Hijacking Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

8.8CVSS7.1AI score0.02223EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/12/18 12:00 a.m.9 views

Open Ticket Request System Information Disclosure Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

6.5CVSS6.3AI score0.0149EPSS
SaveExploits0References1
OSV
OSV
added 2017/12/08 3:29 p.m.12 views

UBUNTU-CVE-2017-16921

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS as an agent can manipulate form parameters related to PGP and execute arbitrary shell commands with the permissions of the OTRS or web...

8.8CVSS7.4AI score0.19901EPSS
SaveExploits8References4
OSV
OSV
added 2017/11/21 2:29 p.m.14 views

UBUNTU-CVE-2017-16664

Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System OTRS 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation...

8.8CVSS7.4AI score0.02492EPSS
SaveExploits0References3
CNVD
CNVD
added 2017/10/10 12:00 a.m.12 views

WordPress Support Ticket System SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Support Ticket System plugin is one of the ticket system plugin. A SQL injection vulnerability exists in WordPress...

9.8CVSS9.5AI score0.03117EPSS
SaveExploits1References1
NVD
NVD
added 2017/09/26 3:29 p.m.22 views

CVE-2015-7670

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...

9.8CVSS10AI score0.03117EPSS
SaveExploits1References3
Prion
Prion
added 2017/09/26 3:29 p.m.25 views

Sql injection

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...

7.5CVSS9.3AI score0.03117EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2017/09/26 3:00 p.m.67 views

CVE-2015-7670

CVE-2015-7670 : The WordPress Support Ticket System plugin (pre-1.2.1) is vulnerable to multiple SQL injections in includes/update.php via the (1) user and (2) id parameters. This allows remote attackers to execute arbitrary SQL commands and potentially access or modify tickets/users. The vulnera...

9.8CVSS10AI score0.03117EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2017/09/26 3:00 p.m.34 views

CVE-2015-7670

Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 id parameter...

10AI score0.03117EPSS
SaveExploits1References3
OSV
OSV
added 2017/09/21 1:29 p.m.11 views

UBUNTU-CVE-2017-14635

In Open Ticket Request System OTRS 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write permissions to gain privileges via code injection...

8.8CVSS7.3AI score0.01922EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2017/06/12 12:00 a.m.39 views

Debian DSA-3876-1 : otrs2 - security update

Joerg-Thomas Vogt discovered that the SecureMode was insufficiently validated in the OTRS ticket system, which could allow agents to escalate their privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

8.8CVSS7.8AI score0.02351EPSS
SaveExploits1References3
CNVD
CNVD
added 2017/06/01 12:00 a.m.9 views

Open Ticket Request System Cross-Site Scripting Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...

6.1CVSS6.2AI score0.00773EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2017/02/14 12:00 a.m.43 views

Joomla JE Ticket System 1.2 SQL Injection

Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/je-ticket-syste...

0.2AI score
SaveExploits0
zdt
zdt
added 2017/02/14 12:00 a.m.29 views

Joomla JE Ticket System 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/02/13 12:00 a.m.43 views

Joomla! Component JE Ticket System 1.2 - SQL Injection

Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/clients-a-communities/help-desk/je-ticket-syste...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2017/02/13 12:00 a.m.17 views

Joomla! Component JE Ticket System 1.2 - SQL Injection

Joomla! Component JE Ticket System 1.2 - SQL Injection Exploit Title: Joomla! Component JE Ticket System v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeticket Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

0.2AI score
SaveExploits0
zdt
zdt
added 2017/01/11 12:00 a.m.36 views

WordPress WP Support Plus Responsive Ticket System 7.1.3 Plugin - Privilege Escalation Vulnerability

Exploit for php platform in category web applications Exploit Title: WP Support Plus Responsive Ticket System 7.1.3 Privilege Escalation Date: 10-01-2017 Software Link: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Exploit Author: Kacper Szurek Contact:...

7.1AI score
SaveExploits0
Rows per page
Query Builder