CVE-2009-2361

CVE-2009-2361 describes a SQL injection in osTicket’s include/class.staff.php. The vulnerability permits remote attackers to inject arbitrary SQL via the staff username parameter, affecting versions prior to 1.6 RC5. The issue exposes the possibility of unauthorized data access or modification du...

CVE-2009-2361: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter...

osTicket Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

osTicket 1.6 RC4 - Admin Login Blind SQL Injection nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin...

osTicket v1.6 RC4 Admin Login Blind SQLi

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

No description provided by source. nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability ============================================================== nGenuity Information Services - Security Advisory...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

CVE-2006-6733

Cross-site scripting XSS vulnerability in support/view.php in Support Cards 1 osTicket allows remote attackers to inject arbitrary web script or HTML via the e parameter...

CVE-2006-6733

Cross-site scripting XSS vulnerability in support/view.php in Support Cards 1 osTicket allows remote attackers to inject arbitrary web script or HTML via the e parameter...

CVE-2006-6733

Vulnerability summary (CVE-2006-6733) : A cross-site scripting (XSS) flaw exists in the web application module described as support/view.php within Support Cards 1 (osTicket) . The issue allows remote attackers to inject arbitrary web script or HTML via the e parameter. This affects the handling ...

CVE-2006-6733: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in support/view.php in Support Cards 1 osTicket allows remote attackers to inject arbitrary web script or HTML via the e parameter...

xss in Support Cards v1 ( oSTicket )

hello My Web : www.LeZr.Com Discovered By : Hacker CooL Sent By [email protected] The bug is here : http://www.example.com/support/view.php?e="scriptalert911;/script best regard ,,...

osTicket 1.21.3 Support Cards - view.php Cross-Site Scripting

osTicket 1.21.3 Support Cards - view.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21669/info osTicket Support Cards is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

osTicket 1.2/1.3 Support Cards - 'view.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21669/info osTicket Support Cards is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

osTicket.txt

script:- osTicket Open Source Support Ticket System site:- http://www.osticket.com exploit by runvirus http://www.host/path/include/openform.php?includedir= welcome in www.sec-area.com...

CVE-2006-5407

PHP remote file inclusion vulnerability in openform.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

CVE-2006-5407

PHP remote file inclusion vulnerability in openform.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...

CVE-2006-5407

CVE-2006-5407 : The NVD/CVE records indicate a PHP remote file inclusion vulnerability in open_form.php used by osTicket, exploitable via a URL in the include_dir parameter to execute arbitrary PHP code. The vulnerability affects the affected software component/function as described in the source...

CVE-2006-5407: Undefined Security Weakness

PHP remote file inclusion vulnerability in openform.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter...