← Database

CVE-2008-0093

MEDIUM CVSS: 4.3 Published: 2008-01-08 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in eTicket 1.5.5.2, and 1.5.6 RC2 and RC3, allow remote attackers to inject arbitrary web script or HTML via the (1) Name and (2) Subject parameters.

Affected Platforms

Eticket Eticket

Weakness Type

CWE-79

References