Design/Logic Flaw

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication...

CVE-2017-15362

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication...

CVE-2017-15362

osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication...

CVE-2017-15362

CVE-2017-15362 corresponds to a stored/reflected cross-site scripting (XSS) issue in osTicket 1.10.1 where an attacker can trigger JavaScript execution by persuading a logged-in user to click a crafted link in tickets.php (status parameter). The core problem is client-side script execution throug...

Enhancesoft osTicket Cross-Site Scripting Vulnerability

Enhancesoft osTicket is a free and lightweight PHP-based question return system from Enhancesoft, USA. The system supports e-mail queries and more. A security vulnerability exists in Enhancesoft osTicket version 1.10.1. An attacker can exploit the vulnerability to execute arbitrary client-side...

osTicket < 1.10.1 SQLi Vulnerability - Active Check

osTicket is prone to an unauthenticated SQL injection SQLi vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

osTicket 1.10 - SQL Injection Vulnerability

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication...

Enhancesoft osTicket SQL Injection Vulnerability

Enhancesoft osTicket is a free and lightweight PHP-based question return system from Enhancesoft, USA. The system supports e-mail queries and more. A SQL injection vulnerability exists in Enhancesoft osTicket version 1.10. A remote attacker can exploit the vulnerability by building an array to...

CVE-2017-14396

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php...

CVE-2017-14396

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php...

Sql injection

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php...

CVE-2017-14396

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php...

CVE-2017-14396

CVE-2017-14396 affects osTicket prior to 1.10.1. The vulnerability is an unauthenticated SQL injection in file handling, achieved by constructing an array via square brackets at the end of a parameter name (demonstrated with the key parameter to file.php). The underlying issue is improper handlin...

osTicket 1.10 - SQL Injection (PoC)

ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions Affected: = v1.10 Technology: PHP...

osTicket 1.10 - SQL Injection (PoC)

osTicket 1.10 - SQL Injection PoC 1. ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions...

osTicket 1.10 SQL Injection

ADVISORY INFORMATION ======================================== Title: osTicket v1.10 Unauthenticated SQL Injection Application: osTicket Bugs: SQL Injection Class: Sensitive Information disclosure Remotely Exploitable: Yes Authentication Required: NO Versions Affected: = v1.10 Technology: PHP...

vmail.geolives.com XSS vulnerability

Vulnerable URL: http://vmail.geolives.com/osticket/osTicket-1.8/file.php?key=xgybdv4t6t8j9eswlvnxfgsa9uxkjirm=1501804800=b2beec7f18008629cb8bbd1f7b3f0f61ea0c5402 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

osTicket 1.9.12 Cross Site Scripting

------------------------------------------------------------------------ Multiple persistent Cross-Site Scripting vulnerabilities in osTicket ------------------------------------------------------------------------ Han Sahin, July 2016...

Cross-site scripting vulnerability in wordpress plugin osticket-wp-bridge

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin osticket-wp-bridge suffers from a cross-site scripting vulnerability due to improper filtering of user...

Osticket 1.9.14 Cross Site Scripting

Exploit Title: Osticket 1.9.14 and below X-Forwarded-For Stored XSS. Date: 24-11-2016 Exploit Author: Joaquin Ramirez Martinez i0-SEC Software Link: http://osticket.com/ Vendor: Osticket """ ============== DESCRIPTION ============== osTicket is a widely-used open source support ticket system. It...