CVE-2010-0606

Cross-site scripting XSS vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php...

CVE-2010-0606

Cross-site scripting XSS vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php...

CVE-2010-0606

Summary: The CVE-2010-0606 issue affects osTicket before 1.6.0 Stable. The vulnerability is a reflected XSS in the parameter f of scp/ajax.php , potentially related to an error message from scp/admin.php . It requires remote authentication and could allow injection of arbitrary web script or HTML...