CVE-2010-0605

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter...

CVE-2010-0606

Cross-site scripting XSS vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php...

CVE-2010-0606

Summary: The CVE-2010-0606 issue affects osTicket before 1.6.0 Stable. The vulnerability is a reflected XSS in the parameter f of scp/ajax.php , potentially related to an error message from scp/admin.php . It requires remote authentication and could allow injection of arbitrary web script or HTML...

CVE-2010-0605

Technical details for CVE-2010-0605 are not publicly available in the provided connected documents. The initial description covers the basic vulnerability info only. Monitor for updates from official advisories for affected versions and fixes.

osTicket 1.6 RC5 - Multiple Vulnerabilities

osTicket 1.6 RC5 - Multiple Vulnerabilities Advisory Name: SQL injection in osTicket Vulnerability Class: SQL injection Release Date: 2010-02-09 Affected Applications: Confirmed in osTicket 1.6 RC5. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity:...

osTicket 1.6 RC5 - Multiple Vulnerabilities

Advisory Name: SQL injection in osTicket Vulnerability Class: SQL injection Release Date: 2010-02-09 Affected Applications: Confirmed in osTicket 1.6 RC5. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C...

CVE-2009-2361

SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter...

Sql injection

SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter...

CVE-2009-2361

SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter...

CVE-2009-2361

CVE-2009-2361 describes a SQL injection in osTicket’s include/class.staff.php. The vulnerability permits remote attackers to inject arbitrary SQL via the staff username parameter, affecting versions prior to 1.6 RC5. The issue exposes the possibility of unauthorized data access or modification du...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

osTicket 1.6 RC4 - Admin Login Blind SQL Injection nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability ============================================================== nGenuity Information Services - Security Advisory...

osTicket v1.6 RC4 Admin Login Blind SQLi

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

No description provided by source. nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

osTicket Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

CVE-2006-6733

Cross-site scripting XSS vulnerability in support/view.php in Support Cards 1 osTicket allows remote attackers to inject arbitrary web script or HTML via the e parameter...

CVE-2006-6733

Cross-site scripting XSS vulnerability in support/view.php in Support Cards 1 osTicket allows remote attackers to inject arbitrary web script or HTML via the e parameter...

CVE-2006-6733

Vulnerability summary (CVE-2006-6733) : A cross-site scripting (XSS) flaw exists in the web application module described as support/view.php within Support Cards 1 (osTicket) . The issue allows remote attackers to inject arbitrary web script or HTML via the e parameter. This affects the handling ...

xss in Support Cards v1 ( oSTicket )

hello My Web : www.LeZr.Com Discovered By : Hacker CooL Sent By [email protected] The bug is here : http://www.example.com/support/view.php?e="scriptalert911;/script best regard ,,...