osTicket 1.10.1 - Arbitrary File Upload

Exploit Title: osTicket 1.10.1 - Arbitrary File Upload Exploit Author: r3j10r Rajwinder Singh Date: 2018-08-08 Vendor Homepage: http://osticket.com/ Software Link: http://osticket.com/download Version: osTicket v1.10.1 CVE-2017-15580 Vulnerability Details: osTicket application provides a...

osTicket 1.10.1 Shell Upload Vulnerability

Exploit for php platform in category web applications Reference: https://becomepentester.blogspot.ae/2017/10/osTicket-File-Upload- Restrictions-Bypassed-CVE-2017-15580.html Exploit Title: File Upload Restrictions Bypassed Date: 18 October, 2017 Exploit Author: Rajwinder Singh Vendor Homepage:...

CVE-2017-15580

osTicket 1.10.1 is vulnerable to an arbitrary file upload due to improper validation of uploaded file contents. The vulnerability allows an attacker to upload arbitrary files (e.g., PHP shells) by abusing the HTML upload mechanism, bypassing client-side checks, and changing file extensions to dis...