CVE-2006-1481

Published: Mar 29, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter.

Affected (3)

Products: Php Ticket: Php Ticket

Php Ticket

1 product

Php Ticket

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Ticket Php Ticket	version ≤ 0.71
Php Ticket Php Ticket	Version 0.5
Php Ticket Php Ticket	Version 0.6

References (10)

http://secunia.com/advisories/19412

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/17229

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/1106

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25436

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1609

Source: cve@mitre.org

http://secunia.com/advisories/19412