CVE-2006-1481

MEDIO 6.5CVE-2006-1481 · Published 29/03/2006 · updated 16/06/2026

In breve

CVE-2006-1481 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda php ticket (php ticket).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 63.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
php ticket php_ticket	`= 0.5= 0.6≤ 0.71`	No fix yet

Description

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.

References

secunia.com/advisories/19412 · Exploit
securityfocus.com/bid/17229 · Exploit
vupen.com/english/advisories/2006/1106
exchange.xforce.ibmcloud.com/vulnerabilities/25436
exploit-db.com/exploits/1609

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free