CVE-2008-5165

Multiple SQL injection vulnerabilities in eTicket 1.5.7 allow remote attackers to execute arbitrary SQL commands via the pri parameter to (1) index.php, (2) open.php, (3) open_raw.php, and (4) newticket.php.

• CWE-89

• http://secunia.com/advisories/30877Vendor Advisory
• http://www.digitrustgroup.com/advisories/web-application-security-eticket2.htmlExploit
• http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.htmlVendor Advisory
• http://www.securityfocus.com/bid/29973
• http://www.securitytracker.com/id?1020379
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43398
• http://secunia.com/advisories/30877Vendor Advisory
• http://www.digitrustgroup.com/advisories/web-application-security-eticket2.htmlExploit
• http://www.eticketsupport.com/announcements/170_is_in_the_building-t91.0.htmlVendor Advisory
• http://www.securityfocus.com/bid/29973
• http://www.securitytracker.com/id?1020379
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43398

Published

Nov 19, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5159Integer overflow in the remote administration protocol proce…
• CVE-2008-5160Unspecified vulnerability in MyServer 0.8.11 allows remote a…
• CVE-2008-5161Error handling in the SSH protocol in (1) SSH Tectia Client …3.7
• CVE-2008-5162The arc4random function in the kernel in FreeBSD 6.3 through…7
• CVE-2008-5163Multiple SQL injection vulnerabilities in The Rat CMS Pre-Al…
• CVE-2008-5164Multiple cross-site scripting (XSS) vulnerabilities in The R…
• CVE-2008-5166SQL injection vulnerability in riddle.php in Riddles Website…
• CVE-2008-5167PHP remote file inclusion vulnerability in layout/default/pa…
• CVE-2008-5168SQL injection vulnerability in tip.php in Tips Complete Webs…
• CVE-2008-5169SQL injection vulnerability in drinks/drink.php in Drinks Co…
• CVE-2008-5170SQL injection vulnerability in item.php in Cheats Complete W…
• CVE-2008-5171Multiple directory traversal vulnerabilities in admin/minibb…