Vulnerabilities

TI-2010-04232 CVE-2010-4500 · GHSA-6v4h-x89m-53cm

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0…

LOW 32

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) subje…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00917 Published 2010-12-08 No fix listed CWE-89

TI-2010-04096 CVE-2010-4363 · GHSA-q24r-hw65-97ff

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0…

LOW 33

Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) email parameter…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01266 Published 2010-12-01 No fix listed CWE-89

TI-2010-04091 CVE-2010-4358 · GHSA-r9rg-2wj8-2vm9

Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parame…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01108 Published 2010-12-01 No fix listed CWE-79

TI-2008-06809 CVE-2008-7121 · GHSA-3x25-pc9c-mv8g

Cross-site scripting (XSS) vulnerability in Mr.

LOW 22

Cross-site scripting (XSS) vulnerability in Mr.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00899 Published 2009-08-28 No fix listed CWE-79

TI-2008-06808 CVE-2008-7120 · GHSA-whc3-w9q2-rqj5

SQL injection vulnerability in Mr.

LOW 35

SQL injection vulnerability in Mr.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01062 Published 2009-08-28 No fix listed CWE-89

TI-2009-02522 CVE-2009-2639 · GHSA-9jg3-ffw3-vq2f

SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote…

LOW 35

SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00923 Published 2009-07-28 No fix listed CWE-89

TI-2009-01988 CVE-2009-2080 · GHSA-4hwj-jpq2-j34p

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which…

LOW 38

admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's p…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02688 Published 2009-06-16 No fix listed CWE-264

TI-2006-06827 CVE-2006-7086 · GHSA-3mff-fpv7-5r9m

The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to…

LOW 26

The (1) dlback.php and (2) dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03514 Published 2007-02-28 No fix listed CWE-200

Vulnerabilities

Filters