critical9.8Public exploit code
CVE-2018-18923
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, category_id and description in action/addproject.php; k…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ticketly 1.0 - 'kind_id' SQL Injection2018-11-26 · webapps · php
Impact
AbiSoft Ticketly 1.0 is affected by multiple SQL Injection vulnerabilities through the parameters name, category_id and description in action/addproject.php; kind_id, priority_id, project_id, status_id and title in action/addticket.php; and kind_id and status_id in reports.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Abisoftgt | Ticketly | Version 1.0 |