In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
CPE | Name | Operator | Version |
---|---|---|---|
otrs | eq | rel-2_0_0-b1 | |
otrs | eq | rel-2_2_1 | |
otrs | eq | rel-2_2_0_beta1 | |
otrs | eq | rel-1_1_0_rc2 | |
otrs | eq | rel-3_3_11 | |
otrs | eq | rel-3_0_0-b5 | |
otrs | eq | rel-2_2_0_beta3 | |
otrs | eq | rel-1_2_0_beta1 | |
otrs | eq | rel-2_4_1 | |
otrs | eq | rel-3_1_0_beta4 |