Tickets CAD 2.20G Multiple Vulnerabilities

No description provided by source. Exploit Title: Tickets CAD 2.20G Multiple Vulnerabilities Date: Aug 4 2012 Exploit Author: chap0 @chap0 Vendor Homepage: http://www.ticketscad.org Software Link: http://www.ticketscad.org/downloads/Tickets06222012V220G.zip Version: 2.20G Tested on: Ubuntu Ticket...

Tickets CAD Multiple Vulnerabilities

Tickets CAD is prone to multiple vulnerabilities. 1. A Reflected XSS vulnerability exists in the search function, search.php within the application. 2. A Stored XSS vulnerability exists in log.php while creating a new log entry. 3. Information disclosure exist which allows users even the guest...