Support Ticket System, CVE-2015-7670

CVE, Research URL: CVE-2015-7670
Home page URL: Security reports for Support Ticket System
Application: Support Ticket System
Published on: Sep 26, 2017
Research Description: Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter.
Affected versions: max 1.2.1.
Status: vulnerable