Debian Security Advisory DSA 3876-1 (otrs2 - security update)

Joerg-Thomas Vogt discovered that the SecureMode was insufficiently validated in the OTRS ticket system, which could allow agents to escalate their privileges. OpenVAS Vulnerability Test $Id: deb3876.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3876-1 using nvtgen 1....

Simple Vulnerability Remediation Collaboration with InsightVM

Many security groups today use ticketing systems that were originally designed for IT or developers, and are usually ill-suited to their vulnerability management needs. Even more commonly, teams simply rely on spreadsheets and unwieldy reports. On the other end of the spectrum, some security team...

Faveo Helpdesk Community 1.9.3 - Cross-Site Request Forgery

Exploit Title: CSRF / Privilege Escalation Manipulation of Role Agent to Admin on Faveo version Community 1.9.3 Google Dork: no Date: 05-April-2017 Exploit Author: @runggareksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy Vendor Homepage: http://www.faveohelpdesk.com/ Software Link:...

International air ticket booking system has loopholes, and can easily cancel, modify, flight reservation-vulnerability warning-the black bar safety net

! From the foreign media, CSO reports, the foreign tens of millions of people every day with the“trip booking system”very unsafe, lack of proper identity authentication scheme. Attackers exploit system weaknesses, and be able to easily change the passenger reservation, cancel the person's flight...

CampTix Event Ticketing <= 1.5.0 - CSV Injection Bypasses and XSS

The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection Bypasses and XSS security vulnerability...

CampTix Event Ticketing <= 1.4.2 - CSV Injection and XSS

The CampTix Event Ticketing WordPress plugin was affected by a CSV Injection and XSS security vulnerability...

Ian Dunn: Multiple XSS in Camptix Event Ticketing Plugin

Hi, As discussed in 151561 submitting the report here. I have got some more bugs in Camptix Event Ticketing plugin. Well, the first one is a ticket page xss caused by the Ticket Title And the second one is kind of self-xss, caused by also the Ticket title of the plugin but in the coupons page. I...

Ian Dunn: CSV Injection at Camptix Event Ticketing

Hi, As you mentioned the scope of vulnerability as Any plugin listed on my WordPress.org profile. I am reporting this issue. I have seen from your WordPress.org profile the second plugin listed is Camptix Event Ticketing So I looked at the source code of the plugin...

Fancier software /tickets/int_order. aspx id parameter sql injection

No description provided by source...

Adele strong, the fans said personal information due to the ticket being leaked-and the vulnerability and early warning-the black bar safety net

! Silence after three years, the 2 5-year-old soul singer Adele bring new album the 2 5 on the strong back, the album was released the first week of the mad sweep of the Anglo-American sales record, the critics said: even if she sold the tape, it will also become a sales champion. And buy Adele...

RHEV: vdsm spice disable-ticketing and VM suspend and restore allows auth bypass

VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor aka RHEV-H 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in Red Hat Enterprise Virtualization before 3.5.6 when VSDM is run with -spice disable-ticketing and a VM is suspended and then restored, allows...

[SECURITY] Fedora 21 Update: rt-4.2.12-1.fc21

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 22 Update: rt-4.2.12-1.fc22

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 23 Update: rt-4.2.12-1.fc23

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/Other/Edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the sdate parameter in Ticketmaster ERP web-based ticketing system/Json_db/other_report.aspx?its=11&dfs=0&jq=0&sdate=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/flight/refund_update.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Sales/meb_his.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the sd parameter in Ticketmaster ERP web-based ticketing system/Json_db/flight_zhekou.aspx?sd=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/flight/Html.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...