eTicket 1.5.5.2 - 'admin.php' Multiple SQL Injections

2008-01-0700:00:00

L4teral

www.exploit-db.com

AI Score

7.4

Confidence

Low

JSON

source: https://www.securityfocus.com/bid/27173/info
   
eTicket is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These vulnerabilities include multiple SQL-injection issues, a cross-site scripting issue, and an authentication-bypass issue.
   
A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database, or execute arbitrary script code in the browser of an unsuspecting user.
   
These issues affect eTicket 1.5.5.2; other versions may also be affected.

http://www.example.com/eTicket/admin.php?a=headers&msg=SQL&#039;