Login Request a demo
ET
Product
Eticket
by Eticket · last CVE Nov 19, 2008
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities8Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eticket to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2008-5165
–
1%
Nov 19
Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1) index.php, (2) open.php, (3)…
Affected: 1.5.7
CVE-2008-0552
–
2%
Feb 1
Cross-site scripting (XSS) vulnerability in index.php in eTicket 1.5.6-RC4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO
Affected: 1.5.6_rc4
CVE-2008-0267
–
1%
Jan 15
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters…
Affected: 1.5.5.2
CVE-2008-0266
–
0%
Jan 15
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other…
Affected: 1.5.5.2
CVE-2008-0268
–
2%
Jan 15
Cross-site scripting (XSS) vulnerability in view.php in eTicket 1.5.5.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter
Affected: 1.5.5.2
CVE-2008-0093
–
1%
Jan 8
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via…
Affected: 1.5.5.2; 1.5.6_rc2; 1.5.6_rc3
CVE-2007-2801
–
2%
Jun 30
Multiple cross-site scripting (XSS) vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web…
Affected: 1.5.5; 1.5.5.1
CVE-2007-2800
–
1%
Jun 28
index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which…
Affected: through 1.5.5.1
Showing 8