5 matches found
Sql injection
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3196
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL commands via the ticketid parameter in a showticket action...
CVE-2007-3197
CVE-2007-3197 affects vBSupport 1.1 before 1.1a. The vulnerability is a SQL injection in vBSupport.php that allows remote execution of arbitrary SQL commands via unspecified vectors. Root cause: unsafeguarded SQL queries in the affected file. Impact per sources: partial confidentiality, partial i...
CVE-2007-3196
The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...