Debian DSA-1993-1 : otrs2 - sql injection

It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise input data that is used on SQL queries, which might be used to inject arbitrary SQL to, for example, escalate privileges on a system that uses otrs2. The oldstable distribution etch is not affected...

Debian Security Advisory DSA 1993-1 (otrs2)

The remote host is missing an update to otrs2 announced via advisory DSA 1993-1. OpenVAS Vulnerability Test $Id: deb19931.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 1993-1 otrs2 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...