Lucene search

K
cve[email protected]CVE-2005-2154
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-2154

2022-10-0316:22:46
web.nvd.nist.gov
29
php
local file inclusion
osticket
vulnerability
security
cve-2005-2154

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.5%

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.

Affected configurations

NVD
Node
osticketosticket_stsMatch1.2
OR
osticketosticket_stsMatch1.2.7
OR
osticketosticket_stsMatch1.3_beta

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.5%

Related for CVE-2005-2154