|
|
eTicket CVE-2007-2800 Information Disclosure Vulnerability
eTicket is prone to a information disclosure vulnerability. index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name[], (2) email[], (3) phone[], or (4) subject[] parameters, which reveals the installation path in the resulting error messages. |
|
Privacy Statement |