Lucene search
K

CVE-2017-9324

🗓️ 12 Jun 2017 06:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 78 Views🌐 WEB

In OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker can gain admin privileges via specific URLs

Related
Detection
Refs
Paths
NVD
Node
otrsotrsRange3.3.03.3.16
OR
otrsotrsRange4.0.04.0.23
OR
otrsotrsRange5.0.05.0.19
ParameterPositionPathDescriptionCWE
Actionquery paramotrs/index.pl?Action=InstallerInstaller accessible without proper privilege checks; can lead to reading/modifying system settings.CWE-269
Installerquery paramotrs/index.pl?Action=InstallerInstaller accessible without proper privilege checks; can lead to reading/modifying system settings.CWE-269
Actionquery paramotrs/index.pl?Action=Installer;Subaction=IntroInstaller path exposed via subaction Intro enabling control over installation process.CWE-269
Installerquery paramotrs/index.pl?Action=Installer;Subaction=IntroInstaller path exposed via subaction Intro enabling control over installation process.CWE-269
Subactionquery paramotrs/index.pl?Action=Installer;Subaction=IntroInstaller path exposed via subaction Intro enabling control over installation process.CWE-269
Introquery paramotrs/index.pl?Action=Installer;Subaction=IntroInstaller path exposed via subaction Intro enabling control over installation process.CWE-269
Actionquery paramotrs/index.pl?Action=Installer;Subaction=StartInstaller path exposed via subaction Start enabling modification of installation parameters.CWE-269
Installerquery paramotrs/index.pl?Action=Installer;Subaction=StartInstaller path exposed via subaction Start enabling modification of installation parameters.CWE-269
Subactionquery paramotrs/index.pl?Action=Installer;Subaction=StartInstaller path exposed via subaction Start enabling modification of installation parameters.CWE-269
Startquery paramotrs/index.pl?Action=Installer;Subaction=StartInstaller path exposed via subaction Start enabling modification of installation parameters.CWE-269
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 May 2026 00:24Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 38.8
EPSS0.01363
78