CVE-2008-0093

EUVD-2008-0106
Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
Affected Products (NVD)
VendorProductVersion
eticketeticket
1.5.5.2
eticketeticket
1.5.6_rc2:_rc2
eticketeticket
1.5.6_rc3:_rc3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/28331
http://www.digitrustgroup.com/advisories/web-application-security-eticket.html
http://www.securityfocus.com/bid/27130
https://exchange.xforce.ibmcloud.com/vulnerabilities/39400
http://secunia.com/advisories/28331
http://www.digitrustgroup.com/advisories/web-application-security-eticket.html
http://www.securityfocus.com/bid/27130
https://exchange.xforce.ibmcloud.com/vulnerabilities/39400