Lucene search

[email protected]CVE-2005-2153

HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-2153

2022-10-0316:22:47

[email protected]

web.nvd.nist.gov

cve

2005

2153

sql injection

osticket

security vulnerability

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.1%

JSON

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

Affected configurations

NVD

Node

osticketosticket_stsMatch1.2

osticketosticket_stsMatch1.2.7

osticketosticket_stsMatch1.3_beta

CPENameOperatorVersion
osticket:osticket_stsosticket osticket stseq1.2
osticket:osticket_stsosticket osticket stseq1.2.7
osticket:osticket_stsosticket osticket stseq1.3_beta

CPE	Name	Operator	Version
osticket:osticket_sts	osticket osticket sts	eq	1.2
osticket:osticket_sts	osticket osticket sts	eq	1.2.7
osticket:osticket_sts	osticket osticket sts	eq	1.3_beta

References

seclists.org/lists/bugtraq/2005/Jul/0009.html

securitytracker.com/id?1014373

www.securityfocus.com/bid/14127

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.1%

JSON

Related for CVE-2005-2153

cvelist1 nvd1 nessus1