osTicket < 1.14.3 Multiple Vulnerabilities

osTicket is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

Cross site scripting

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

CVE-2020-24917

CVE-2020-24917 affects osTicket

CVE-2020-24917: Improper Neutralization of Input During Web Page Generation

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

PT-2020-15856

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue allows for XSS attacks through a crafted filename to the DraftAjaxAPI:: uploadInlineImage function in include/ajax.draft.php. Recommendations For versions prior to 1.14.3, update to versi...

Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2020-49350)

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in versions prior to Enhancesoft osTicket 1.14.3. The vulnerability is related to the affected version failing to properly validate client data. Because of an unvalidated echo $...

CVE-2020-16193

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

CVE-2020-16193

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

Design/Logic Flaw

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

CVE-2020-16193

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

CVE-2020-16193

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

CVE-2020-16193

Summary of CVE-2020-16193 : osTicket

CVE-2020-16193: Improper Neutralization of Input During Web Page Generation

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info'notes' call...

PT-2020-14795

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.14.3 Description The issue arises from an unvalidated echo call in the include/staff/banrule.inc.php file, specifically echo $info'notes', which allows for XSS attacks. Recommendations For versions prior to 1.14.3,...

osTicket < 1.14.3 XSS Vulnerability

osTicket is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2021-31228)

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the scp/categories.php file in Enhancesoft osTicket version 1.14.2. The vulnerability stems from the lack of proper validation of client data in the WEB application, which can...