Skip to content
OpenAdvisories

Vendor

Codester

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    WBiz Desk 1.2 SQL Injection Vulnerability via ticket.php Parameter

    WBiz Desk 1.2 contains a SQL injection vulnerability that allows non-admin users to manipulate database queries through the 'tk' parameter in ticket.php. Attackers can inject crafted SQL statements using UNION-based techniques to extract sensitive database in…