658 matches found
Multiple XSS Vulnerabilities in Queue Condition
Description Cross-Site Scripting XSS vulnerabilities arise when data is copied from a request and echoed into the application's immediate response in an unsafe way. An attacker can use the vulnerability to construct a request that, if issued by another application user, will cause JavaScript code...
osTicket < 1.16.4 XSS Vulnerability
osTicket is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2022-4271
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
PT-2022-26513 · Osticket · Osticket
Name of the Vulnerable Software and Affected Versions: osTicket versions prior to 1.16.4 Description: The issue is related to Cross-site Scripting XSS - Reflected, which was found in the GitHub repository osticket/osticket. Recommendations: For versions prior to 1.16.4, update to version 1.16.4 o...
Enhancesoft osTicket 跨站脚本漏洞
Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A security vulnerability exists in Enhancesoft osTicket versions prior to 1.16.4. The vulnerability stems from setting an ordinary user's username as the XSS payload, and then placing the same XSS...
CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
CVE-2022-4271
osTicket (osticket/osticket)
CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to 1.16.4...
CVE-2022-32074
A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...
CVE-2022-32074
A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...
Cross site scripting
A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...
CVE-2022-32074
A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...
CVE-2022-32074
CVE-2022-32074 affects the osTicket-plugins Storage-FS component (audit/class.audit.php). It is a stored XSS vulnerability where a crafted SVG file can cause arbitrary web scripts/HTML execution. The issue is linked to a commit in the repository (a7842d494889fd5533d13deb3c6a7789768795ae) as part ...
CVE-2022-32074
A stored cross-site scripting XSS vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file...
Enhancesoft osTicket 跨站脚本漏洞
Enhancesoft osTicket is an open source ticketing system from Enhancesoft, Inc. in the United States. A security vulnerability exists in Enhancesoft osTicket, which stems from its component audit/class.audit.php that allows attackers to execute arbitrary web script or HTML via a crafted SVG file...
Reflected XSS in Username
Description If a regular user's username is set to a XSS payload, and then that same XSS payload is placed in the q query parameter of /scp/ajax.php/users/local, then reflected XSS is achieved. This XSS can lead to complete takeover of the osTicket instance. Proof of Concept Set a user's username...
osTicket < 1.14.8, 1.15.x < 1.15.4 Multiple Vulnerabilities
osTicket is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...