CVE-2021-45811

2023-09-0802:15:07

Google

osv.dev

cve-2021-45811

sql injection

osticket

search functionality

8.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.5%

JSON

A SQL injection vulnerability in the “Search” functionality of “tickets.php” page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the “keywords” and “topic_id” URL parameters combination.

CPENameOperatorVersion
osticketeq1.15.5
osticketeq1.15.7
osticketeq1.14.8
osticketeq1.15.8
osticketeq1.14.7
osticketeq1.14.5
osticketeq1.15
osticketeq1.15.4
osticketeq1.15.2
osticketeq1.15.1

Name	Operator	Version
osticket	eq	1.15.5
osticket	eq	1.15.7
osticket	eq	1.14.8
osticket	eq	1.15.8
osticket	eq	1.14.7
osticket	eq	1.14.5
osticket	eq	1.15
osticket	eq	1.15.4
osticket	eq	1.15.2
osticket	eq	1.15.1