CVE-2008-5165

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.35%

Published

Nov 19, 2008

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1) index.php, (2) open.php, (3) open_raw.php, and (4) newticket.php.

Weaknesses (CWE)

CWE-89

Affected Products (1)

eticket · eticketvulnerable

References (12)

http://secunia.com/advisories/30877

Vendor Advisory

http://www.digitrustgroup.com/advisories/web-application-security-eticket2.html

Exploit

http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html

Vendor Advisory

http://www.securityfocus.com/bid/29973

http://www.securitytracker.com/id?1020379

https://exchange.xforce.ibmcloud.com/vulnerabilities/43398

http://secunia.com/advisories/30877

Vendor Advisory

http://www.digitrustgroup.com/advisories/web-application-security-eticket2.html

Exploit

http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.html

Vendor Advisory

http://www.securityfocus.com/bid/29973

http://www.securitytracker.com/id?1020379

https://exchange.xforce.ibmcloud.com/vulnerabilities/43398

KEV Catalog EPSS Scores Vendors All CVEs