Vulnerability in PHP Ticket
CVE-2006-1481
SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.
EPSS: 0.010 (59.1th percentile) — read the EPSS interpretation.
Affected products
- Php_ticket — versions 0.5, 0.6
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (Exploit, x_refsource_SECUNIA, third-party-advisory)