5322 matches found
CVE-2009-0333: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WebAmoeba WA Ticket System comwaticketsystem component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to index.php...
Joomla Live Ticket Component 1.0 SQL Injection
Joomla Component comlivetickertid Blind SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : Blind SQL injection Google Dork : inurl:comliveticker -------------------------------------------------- ! Name : Live Ticker ! Auth...
Mole Group Airline Ticket Script - Authentication Bypass
Mole Group Airline Ticket Script - Authentication Bypass ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! !...
Mole Group Airline Ticket Script - Authentication Bypass
! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOO...
Mole Group Airline Ticket Script - SQL Injection
Mole Group Airline Ticket Script - SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
Mole Group Airline Ticket Script SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ Mole Group Airline Ticket Script SQL Injection Vulnerability ============================================================...
Code injection
Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to...
CVE-2008-4788
Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to...
CVE-2008-4787
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
CVE-2008-4735: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system CoAST 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sectionsfile parameter...
[SECURITY] Fedora 9 Update: pam_krb5-2.3.0-2.fc9
This is pamkrb5, a pluggable authentication module that can be used with Linux-PAM and Kerberos 5. This module supports password checking, ticket creation, and optional TGT verification and conversion to Kerberos IV ticke ts. The included pamkrb5afs module also gets AFS tokens if so configured...
CVE-2008-3700
Multiple cross-site scripting XSS vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the sessionid parameter in a livesupport startclientchat action to visitor/index.php; 2 the filter parameter in a news view action to...
[SECURITY] Fedora 7 Update: otrs-2.1.5-4.fc7
OTRS is an Open source Ticket Request System also well known as trouble ti cket system with many features to manage customer telephone calls and e-mails. The system is built to allow your support, sales, pre-sales, billing, internal IT, helpdesk, etc. department to react quickly to inbound...
CVE-2008-0523
Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...
CVE-2008-0523
Multiple cross-site scripting XSS vulnerabilities in SoftCart.exe in SoftCart 5.1.2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 LicensePlate, 2 LicenseState, 3 TicketDate, and 4 TicketNumber parameters. NOTE: the provenance of this information is unknown; the details...
CVE-2002-2364
Technical details about CVE-2002-2364 are not publicly available in the provided documents; no affected products, fixes, or exploit specifics are disclosed. Monitor for updates.
CVE-2002-2364
Cross-site scripting XSS vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket...
CVE-2002-2364: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket...
Sql injection
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...