Skip to content
Noroxi

eticket records

8 published records for vendor eticket.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2008-5165
      30Monitor

      Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1

      HighCVSS 7.5No exploitEPSS 1%

      eticket · eticketNov 19, 2008

    • CVE-2008-0267
      30Monitor

      Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sta

      HighCVSS 7.5Proof of conceptEPSS 1%

      eticket · eticketJan 15, 2008

    • CVE-2007-2800
      20Monitor

      index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[

      MediumCVSS 5.0No exploitEPSS 1%

      eticket · eticketJun 28, 2007

    • CVE-2007-2801
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote

      MediumCVSS 4.3Proof of conceptEPSS 2%

      eticket · eticketJun 29, 2007

    • CVE-2008-0552
      18Monitor

      Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML vi

      MediumCVSS 4.3Proof of conceptEPSS 1%

      eticket · eticketFeb 1, 2008

    • CVE-2008-0268
      17Monitor

      Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via t

      MediumCVSS 4.3Proof of conceptEPSS 1%

      eticket · eticketJan 15, 2008

    • CVE-2008-0093
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to in

      MediumCVSS 4.3No exploitEPSS 1%

      eticket · eticketJan 7, 2008

    • CVE-2008-0266
      10Monitor

      Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative passwor

      LowCVSS 2.6Proof of conceptEPSS 0%

      eticket · eticketJan 15, 2008