CVE-2023-51306

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2023-51339

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51337

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...

CVE-2023-51306

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting XSS in the "name, title" parameters...

CVE-2023-51339

CVE-2023-51339 affects PHPJabbers Event Ticketing System v1.0. The root cause is a lack of rate limiting in the Forgot Password/Forgot Email flow, enabling an attacker to generate a large volume of e-mails to a legitimate user and cause a DoS. Documents describe the vulnerability and an exploit e...

CVE-2023-51337

PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting XSS in "lid" parameter in index...

CVE-2023-51339

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service DoS via a large amount of generated e-mail messages...

CVE-2023-51306

CVE-2023-51306 affects PHPJabbers Event Ticketing System v1.0 and is described as a Stored Cross-Site Scripting (XSS) vulnerability in the name and title parameters. The issue is documented across multiple sources confirming the vulnerability, with exploitation details (e.g., affected parameters)...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is affected by a Multiple HTML Injection (XSS) in parameters lid, name, plugin_sms_api_key, plugin_sms_country_code, and title. Root cause is HTML injection in those fields; impact described as potential HTML code execution in affected pages. Remediation sta...

CVE-2023-51303

PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the "lid, name, pluginsmsapikey, pluginsmscountrycode, title, pluginsmsapikey, title" parameters...

The vulnerability of the OTRS request processing system, related to incorrect handling of HTTP request headers, allows a hacker to upload arbitrary files.

The vulnerability of the OTRS request processing system is related to the improper handling of HTTP request headers due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to upload arbitrary files...

Janto Ticketing 数据伪造问题漏洞

Janto Ticketing is a ticketing software from Janto. A data forgery issue vulnerability exists in versions of Janto Ticketing prior to r12, which stems from insufficient data authenticity validation and allows an unauthorized user to change a password to reset the content of an email...

Janto Ticketing 安全漏洞

Janto Ticketing is a ticketing software from Janto. A security vulnerability exists in versions of Janto Ticketing prior to r12, which stems from the presence of an unauthenticated password change feature that allows an unauthorized user to change another person's password...

WordPress plugin Ticketmeo – Sell Tickets – Event Ticketing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

SUSE CVE-2025-24390

A vulnerability in OTRS Application Server and reverse proxy settings allows session hijacking due to missing attributes for sensitive cookie settings in HTTPS sessions. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023.X OTRS 2024.X...

PT-2025-2648 · Otrs · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS versions 6.0.x through 8.0.x OTRS versions 2023.x through 2024.x Description: An improper privilege management issue in the OTRS Generic Interface module allows users with read-only permissions to change the ticket status. This issue may...

How Imperva Protects the Arts Industry from Ticketing Abuse by Carding Bots

The ticketing industry is under constant threat from malicious bots, with bad actors targeting these platforms for financial gain. Bots accounted for 31.1% of all traffic to entertainment platforms in 2024, with attacks ranging from scalping and credential stuffing to carding operations. When one...