CVE-2007-3196

The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...

CVE-2007-3197

CVE-2007-3197 affects vBSupport 1.1 before 1.1a. The vulnerability is a SQL injection in vBSupport.php that allows remote execution of arbitrary SQL commands via unspecified vectors. Root cause: unsafeguarded SQL queries in the affected file. Impact per sources: partial confidentiality, partial i...