CVE-2018-18527

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.

• CWE-89

• https://www.exploit-db.com/exploits/45637/Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/45637/Exploit, Third Party Advisory, VDB Entry

Published

Oct 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18516Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-18517Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x b…
• CVE-2018-18519BestXsoftware Best Free Keylogger before 6.0.0 allows local …
• CVE-2018-18520An Invalid Memory Address Dereference exists in the function…6.5
• CVE-2018-18521Divide-by-zero vulnerabilities in the function arlib_add_sym…5.5
• CVE-2018-18524Evernote 6.15 on Windows has an incorrectly repaired stored …
• CVE-2018-18529ThinkPHP 3.2.4 has SQL Injection via the count parameter bec…
• CVE-2018-1853IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1…6.1
• CVE-2018-18530ThinkPHP 5.1.25 has SQL Injection via the count parameter be…
• CVE-2018-18531text/impl/DefaultTextCreator.java, text/impl/ChineseTextProd…
• CVE-2018-18535The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and …
• CVE-2018-18536The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v…