Tickets
CVE-2018-13742
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
The mintToken function of a smart contract implementation for tickets (TKT), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
AnalysisAI
The mintToken function of a smart contract implementation for tickets (TKT), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. The mintToken function of a smart contract implementation for tickets (TKT), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value. Affected products include: Tickets Project Tickets.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.
Unauthenticated RCE in SPIP tickets plugin before 4.3.3 via code injection. Allows executing arbitrary PHP code without
Hardcoded MySQL credentials in Open ISES Tickets before 3.44.2 expose database username, password, and database name thr
Credential exposure in Open ISES Tickets versions prior to 3.44.2 allows remote attackers to obtain valid MySQL database
SQL injection in Open ISES Tickets before 3.44.2 allows attackers controlling or impersonating an InstaMapper or Google
Man-in-the-middle interception of authentication traffic in Open ISES Tickets before 3.44.2 is possible because the appl
Missing TLS certificate verification in Open ISES Tickets before 3.44.2 allows network-positioned attackers to intercept
Man-in-the-middle exposure in Open ISES Tickets before 3.44.2 stems from the shared helper functions in incs/functions.i
TLS certificate verification bypass in Open ISES Tickets before 3.44.2 allows network-positioned attackers to intercept
SQL injection in Open ISES Tickets before 3.44.2 lets authenticated users tamper with backend database queries through t
SQL injection in Open ISES Tickets before 3.44.2 lets authenticated users tamper with the incidents summary report query
SQL injection in Open ISES Tickets before 3.44.2 allows authenticated attackers to manipulate database queries via the u
SQL injection in Open ISES Tickets before 3.44.2 allows authenticated attackers to manipulate backend database queries v
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today