EUVD-2015-4695

Malware in sbrugna...

CVE-2015-4676

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

Sql injection

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2015-4676

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2015-4676

The connected documents confirm a SQL injection vulnerability in TickFa 1.x affecting ticket.php via the tid parameter in a read action. Root cause noted as improper handling/validation of tid input, enabling remote authenticated users to execute arbitrary SQL commands against the database. This ...

TickFa 1.x SQL Injection

/ + Author: Mohammad Reza Espargham + Title: TickFa 1.x - SQL Injection Vulnerability + Date: 26-04-2015 + Vendor: http://tickfa.aftab.cc/ + SoftWare Link : http://tickfa.aftab.cc/dl/tickfa.zip + Type: WebAPP + Tested on: KaliLinux Debian / curl 7.35.0 + GHDB : intext:"تیکت برای بخش مورد نظر ایجا...