Security Advisory
CVE-2015-4676
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action.