medium6.5
CVE-2015-4676
SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read act…
Impact
SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aftab | Tickfa | through 1.0.1 |