2018-10-19 21:29:00 2018-12-04 19:41:08

OwnTicket 2018-05-23 allows SQL Injection via the showTicketId or editTicketStatusId parameter.