QuickTicket multiple sql inj.

###############################################
Vuln. discovered by : r0t
Date: 27 June 2007
vendor:http://www.qt-cute.org/
affected versions: tested on QuickTicket 1.2 build:20070621
other versions also can be affected.
###############################################

QuickTicket contains a flaw that allows a remote sql injection attacks.Input passed to the "dir","order" parameter in "qti_ind_member.php" isn't properly sanitised before being used in a SQL query..
This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

###############################################
Solution:
Edit the source code to ensure that input is properly sanitised.
###############################################