658 matches found
Sql injection
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2006-2039
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2006-2039
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2006-2039
CVE-2006-2039 : The osTicket component of Help Center Live prior to 2.1.0 contains multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via unknown vectors. Affected software: Help Center Live with embedded osTicket prior to 2.1.0. Impact described in connect...
CVE-2005-3639
Summary: CVE-2005-3639 is a local/file inclusion vulnerability in the Help Center Live product, affecting the osTicket module prior to version 2.0.3. The issue arises from insufficient sanitization of the file parameter (path traversal risk) in the module.php flow, allowing remote attackers to re...
osTicket Attachment Viewing Vulnerability
The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. OpenVAS Vulnerability Test $Id: osticketviewattachments.nasl 6056 2017-05-02 09:02:50Z teissa $...
osTicket setup.php Accessibility
The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Since that script does not require authenticated access, it is possible for an attacker to modify osTicket's configuration using a specially crafted call to setup.php to...
osTicket Backdoored - Active Check
There is a vulnerability in the current version of osTicket that allows an attacker to upload an PHP script, and then access it causing it to execute. This script tries to detect infected servers. Copyright C 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, a...
osTicket setup.php Accessibility
The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
osTicket < 1.2.7 Large Attachment Vulnerability - Active Check
The target is running at least one instance of osTicket that enables a remote user to an open new ticket with an attachment of unlimited size. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
osTicket Detection (HTTP)
HTTP based detection of osTicket. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.13858";...
osTicket Backdoored
There is a vulnerability in the current version of osTicket that allows an attacker to upload an PHP script, and then access it causing it to execute. This attack is being actively exploited by attackers to take over servers. This script tries to detect infected servers. OpenVAS Vulnerability Tes...
osTicket Support Address DoS
The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. If so, a remote attacker can generate a mail loop on the target by opening a ticket with the...
osTicket <= 1.2.7 Support Address DoS Vulnerability
The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced...
osTicket < 1.2.7 Attachment Viewing Vulnerability
The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, a...
osTicket < 1.2.7 Attachment Code Execution Vulnerability - Active Check
The target is running at least one instance of osTicket that enables a remote user to open a new ticket with an attachment containing arbitrary PHP code and then to run that code using the permissions of the web server user. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions mig...
osTicketSQL.txt
GulfTech Security Research May 2nd, 2005 Vendor : osTicket URL : http://www.osticket.com/ Version : All Versions Risk : Multiple Vulnerabilities Description: osTicket is a widely-used open source support ticket system. It is a lightweight support ticket tool written mainly using PHP scripting...
CVE-2005-2154
PHP local file inclusion vulnerability in 1 view.php and 2 open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter...
CVE-2005-2153
CVE-2005-2153 affects osTicket 1.3.1 beta and earlier, where a vulnerability in the PHP file class.ticket.php allows a remote attacker to inject SQL via the ticket variable, enabling arbitrary SQL commands. This is a classic SQL injection flaw that can impact data integrity and confidentiality. T...