618 matches found
CVE-2023-5421
An attacker who is logged into OTRS as an user with privileges to create and change customer user data may manipulate the CustomerID field to execute JavaScript code that runs immediatly after the data is saved.The issue onlyoccurs if the configuration for AdminCustomerUser::UseAutoComplete was...
SUSE CVE-2023-38056
Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authenticated attacker with admin privileges local execution of Code.This issue affects OTRS: from 7.0.X before 7.0.45, from 8.0.X before 8.0.35...
MAL-2023-967 Malicious code in wix-commerce-ticketing-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b99bb56f643f4526ad69d487c48bec96603f7a221baf7ed0637b6cdb74d3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-3003
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...
CVE-2023-3003
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...
Sql injection
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...
CVE-2023-3003 SourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...
CVE-2023-3003
CVE-2023-3003 affects SourceCodester Train Station Ticketing System 1.0, specifically the GET parameter handler in manage_prices.php. The vulnerability arises from unsafely handling the id parameter, allowing SQL injection that can be triggered remotely. Public disclosure exists and multiple sour...
PT-2023-22515 · Sourcecodester · Train Station Ticketing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Train Station Ticketing System version 1.0 Description: A critical issue was found in the file manage prices.php of the component GET Parameter Handler. The manipulation of the id argument leads to sql injection. The attack can...
CVE-2023-2865
A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...
CVE-2023-2865
A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...
Sql injection
A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...
CVE-2023-2865 SourceCodester Theme Park Ticketing System GET Parameter print_ticket.php sql injection
A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...
CVE-2023-2865
The CVE-2023-2865 entry concerns SourceCodester Theme Park Ticketing System 1.0. A SQL injection exists in the GET Parameter Handler’s print_ticket.php, caused by unsafely handling the id argument. The vulnerability is exploitable remotely, with public disclosure cited across sources (VDB-229821)...
PT-2023-21874 · Sourcecodester · Sourcecodester Theme Park Ticketing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Theme Park Ticketing System version 1.0 Description: A critical issue affects the GET Parameter Handler component in the print ticket.php file, allowing for SQL injection through the manipulation of the id argument. This can be...
Theme Park Ticketing System SQL注入漏洞
Theme Park Ticketing System is a theme park ticketing system by the individual developer Carlo Montero. SourceCodester Theme Park Ticketing System version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the printticket.php file and parameter id, which can be exploite...
Post Action Report: Bad Firewall Rule Released to WPEngine Customers Wednesday
On Wednesday afternoon a small percentage of WPEngine websites using a paid version of Wordfence experienced a 500 Internal Server Error or white screen on their sites due to an erroneous firewall rule that we released. If you have experienced this issue, please check your email which contains...
Peppermint 安全漏洞
Peppermint is an open source ticket management system from Peppermint Labs. A security vulnerability exists in Peppermint version v0.2.4. An attacker exploited the vulnerability to access emails and passwords via a specially crafted request...
