CVE-2011-5187

The CVE-2011-5187 entry describes a Cross-site scripting (XSS) flaw in Drupal’s Support Ticketing System module (6.x-1.x) prior to 6.x-1.7. The vulnerability allows remote authenticated users with the 'administer support projects' permission to inject arbitrary web script or HTML via unspecified ...

CVE-2011-5187

Cross-site scripting XSS vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-5187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Support Ticketing System module 6.x-1.x before 6.x-1.7 for Drupal allows remote authenticated users with the "administer support projects" permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2164

Name of the Vulnerable Software and Affected Versions Drupal Support Ticketing System module versions 6.x-1.x before 6.x-1.7 Description A cross-site scripting XSS issue exists in the Support Ticketing System module for Drupal, allowing remote authenticated users with the "administer support...

Fedora Update for rt3 FEDORA-2012-8290

Check for the Version of rt3 OpenVAS Vulnerability Test Fedora Update for rt3 FEDORA-2012-8290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for rt3 FEDORA-2012-8363

Check for the Version of rt3 OpenVAS Vulnerability Test Fedora Update for rt3 FEDORA-2012-8363 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for rt3 FEDORA-2012-8339

Check for the Version of rt3 OpenVAS Vulnerability Test Fedora Update for rt3 FEDORA-2012-8339 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 16 Update: rt3-3.8.12-1.fc16

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 15 Update: rt3-3.8.12-1.fc15

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 17 Update: rt3-3.8.12-1.fc17

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

CVE-2012-1673

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter...

Sql injection

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2012-1673

The CVE-2012-1673 issue affects the e-ticketing product, specifically the loginscript.php component, where both the user_name and password POST parameters can be used to perform SQL injection. The root cause is improper handling of input that allows remote attackers to execute arbitrary SQL comma...

CVE-2012-1673

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2012-1673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2012-3433

Name of the Vulnerable Software and Affected Versions e-ticketing affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the password parameter in the loginscript.php file. This can lead to unauthorized access and manipulation of databa...

'e-ticketing' SQL Injection (CVE-2012-1673)

'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TESTED VERSION...

e-ticketing SQL Injection

'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TESTED VERSION...

e-ticketing - SQL Injection

e-ticketing - SQL Injection 'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST parameters. II. TEST...

e-ticketing SQL Injection (CVE-2012-1673)

Exploit for php platform in category web applications 'e-ticketing' SQL Injection CVE-2012-1673 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in loginscript.php that allows for SQL injection of the 'username' and 'password' POST...