CVE-2008-0267
eTicket 1.5.5.2 - Authenticated SQL Injection via search.php and admin.php Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0267. PoCs published by L4teral.
AI-analyzed exploit summary The provided text describes multiple input-validation vulnerabilities in eTicket 1.5.5.2, including SQL injection, XSS, and authentication bypass. It includes a sample URL demonstrating a potential SQL injection attack but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in eTicket 1.5.5.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) status, (2) sort, and (3) way parameters to search.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the (4) msg and (5) password parameters to admin.php.
Exploits (2)
The provided text describes multiple input-validation vulnerabilities in eTicket 1.5.5.2, including SQL injection, XSS, and authentication bypass. It includes a sample URL demonstrating a potential SQL injection attack but lacks executable exploit code.
The provided text describes multiple input-validation vulnerabilities in eTicket 1.5.5.2, including SQL injection, XSS, and authentication bypass. It includes a sample URL demonstrating a potential SQL injection vector but lacks executable exploit code.