CVE-2018-7193

Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter...

PT-2018-17939

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.10.2 Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the order parameter in the "/scp/directory.php" API endpoint...