Debian Security Advisory DSA 973-1 (otrs)

The remote host is missing an update to otrs announced via advisory DSA 973-1. Several vulnerabilities have been discovered in otrs, the Open Ticket Request System, that can be exploited remotely. The Common vulnerabilities and Exposures Project identifies the following problems: CVE-2005-3893...

CVE-2005-3894

Open Ticket Request System (OTRS) is affected by CVE-2005-3894 and related CVEs. The vulnerabilities are cross-site scripting (XSS) in index.pl that allow remote authenticated users to inject arbitrary script or HTML via hex-encoded values in the QueueID parameter and via Action parameters. Affec...