Security Advisory

CVE-2018-18527

9.8
CRITICAL

Vulnerability Description

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.
Published Date October 19, 2018
Official Source NIST NVD Advisory