CVE-2026-14871

CVE-2026-14871 - osTicketのajax.tickets.phpにおけるBOLA / IDOR 壊れたオブジェクトレベル認可（BOLA）: 安全でない直接オブジェクト参照（IDOR） include/ajax.tickets.php → viewField 関数 @JF0x0r 氏による報告 · 2026年3月27日 ステータス: 修正済み - osTicket v1.17.8 / v1.18.4 で修正版リリース 概要...

cve-disclosures

CVE 공개 조정된 취약점 공개 및 CVE 참조 정보는 Anindya Sankar Roy GitHub: @fr3akhacks에 의해 게시되었습니다. 아래 각 항목은 영향을 받는 제품, 영향/수정 버전, CVE ID, 상세 설명, 취약점 유형, 근본 원인 및 영향을 포함하는 공개 권고로 연결됩니다. osTicket Enhancesoft LLC...

CVE-2022-32132

osTicket 지원 티켓팅 시스템용 CVE-2022-32132 반사형 XSS: root@kitploit: Payload: " onmouseover="alert1 http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert1%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name...

CVE-2026-22200

CVE-2026-22200: osTicket PDFファイル読み取り + CNEXT RCE osTicket CVE-2026-22200 の概念実証エクスプロイトです。PHP フィルタを悪用して mPDF ライブラリ経由でファイルを外部に持ち出し、CVE-2024-2961 CNEXT を介して RCE に連鎖させることができます。 ブログ記事 詳細はこちら: Horizon3.ai - チケットからシェルへ: osTicket における PHP フィルタと CNEXT の悪用 CVE-2026-22200 最新のセキュリティ研究については Twitter で Horizon3....

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter. id: CVE-2018-7196 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

osTicket < 1.12.1 - Cross-Site Scripting

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the...

osTicket 1.15.x - SQL Injection

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination. id: CVE-2021-45811 info: name: osTicket 1.15.x - SQL Injection author:...

osTicket < v1.16.6 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6. id: CVE-2023-1317 info: name: osTicket v1.16.6 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prio...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "message" parameter. id: CVE-2018-7192 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity:...

osTicket < v1.16.6 - Cross-Site Scripting

Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to v1.16.6. id: CVE-2023-1318 info: name: osTicket v1.16.6 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Generic in GitHub repository osticket/osticket prior to...

osTicket < v1.16.6 - Cross-Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prior to v1.16.6. id: CVE-2023-1315 info: name: osTicket v1.16.6 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository osticket/osticket prio...

osTicket < 1.10.2 - Cross-Site Scripting

Cross-site scripting XSS vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "order" parameter. id: CVE-2018-7193 info: name: osTicket 1.10.2 - Cross-Site Scripting author: ritikchaddha severity: medium...

CVE-2022-31890

CVE-2022-31890 for osTicket | サポートチケットシステム ニックネーム: root@kitploit: python nickname.py The output of the first nickname in the table. パスワード: root@kitploit: python password.py The output of the first password in the table. ファイルに出力: root@kitploit: python dumpFile.py cat dump.txt || nickname::password...

CVE-2022-32074

CVE-2022-32074 osTicket용 | 지원 티켓팅 시스템 root@kitploit: 1. Find the file listing directory, the root of the file download directoryм fileuploads this is an example. 2. Load the following xssPayload.svg and open it 예시:...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket 임의 파일 읽기를 통한 RCE PHP 필터 체인 주입과 CVE-2024-2961CNEXT을 결합한 전체 체인 익스플로잇으로, 취약한 osTicket 설치에서 인증 없이 원격 코드 실행을 수행합니다. 목차 개요 취약점 상세 공격 흐름 기능 설치 사용법 기술 세부사항 문제 해결 탐지 및 완화 크레딧 면책 조항 개요...

OsTicket < 1.14.3 - Server Side Request Forgery

SSRF vulnerability exists in osTicket before 1.14.3, allowing an attacker to add malicious files to the server or perform port scanning. id: CVE-2020-24881 info: name: OsTicket 1.14.3 - Server Side Request Forgery author: hnd3884 severity: critical description: | SSRF vulnerability exists in...

osTicket - Arbitrary File Read

Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficientl...

osticket-stored-xss-security-assessment

CVE-2026-36214 - Bootstrap Tooltip を介した osTicket の保存型XSS コンサルタント形式のサイバーセキュリティレポート osTicket の保存型クロスサイトスクリプティングに関するプロフェッショナルな脆弱性評価レポート。ビジネスへの影響、是正措置、緩和戦略を含みます。 📍 レポート概要...

CVE-2026-36214

CVE-2026-36214 - osTicket의 취약한 Bootstrap Tooltip 구성요소를 통한 저장형 교차 사이트 스크립팅 XSS 설명 Enhancesoft osTicket 버전 1.10부터 1.17.7, 1.18.0부터 1.18.3에는 취약한 Bootstrap Tooltip 3.3.4 구성요소CVE-2019-8331가 포함되어 있어 저장형 교차 사이트 스크립팅XSS 취약점이 발생합니다. 기본 osTicket 구성에서 티켓 제출자"사용자"는 사전 인증 없이 티켓을 제출할 수 있으며, 사용자 자체 등록도 기본적으로...

CVE-2020-12629

제목: osTicket 1.14.1 - 지속적인 인증된 크로스 사이트 스크립팅 작성자: Mehmet Kelepce / Gais Cyber Security 날짜 : 2020-03-24 소스 링크: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db : https://www.exploit-db.com/exploits/48413 공급업체...