CVE-2018-18527

Publication date

2018-10-19 19:00:00

Family

mitre

State

PUBLISHED

Description

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.