← Back

The Ticket System

the_ticket_system

Vendor: Mrcgiguy • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-2639
1Mrcgiguy
1The Ticket System
Apr 23, 2026
Jul 28, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in admin.php in MRCGIGUY The Ticket System 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewticket action.
CVE-2009-2080
1Mrcgiguy
1The Ticket System
Apr 23, 2026
Jun 16, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's p...Show more
admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.Show less