CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2022/05/04 5:15 p.m.•13 views

CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...

9.8CVSS8AI score

Exploits0References1

CVE•added 2022/05/04 4:56 p.m.•96 views

CVE-2021-42235

osTicket is vulnerable to SQL injection in the login and password reset flow (CVE-2021-42235). Affected: osTicket before 1.14.8 and before 1.15.4. Impact: attacker could access the administration profile functionality. Remedy: upgrade to osTicket 1.14.8 or 1.15.4 or later.

9.8CVSS9.9AI score0.00967EPSS

Exploits0References1Affected Software1

Cvelist•added 2022/05/04 4:56 p.m.•25 views

CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...

10AI score0.00967EPSS

Exploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by