CVE-2004-0613

osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory...

CVE-2004-0613

osTicket

CVE-2004-0614

osTicket implements a trust-based upload size check using a hidden form field in the submit form, which could allow a remote attacker to upload a file of any size. Reported across CVE-2004-0614 with an impact of partial integrity and partial availability, potentially enabling a denial-of-service ...

Multiple osTicket exploits!

ATTENTION ALL SITES USING OSTICKET. PLEASE DISABLE UPLOADS. June 17 2004. Multiple Problems with osTicket Software Data: OSTICKET, http://www.osticket.com/ "Need to test the system before you install? Then try our demo version of the latest release of osTicket. DEMO DISABLED" Note: When a softwar...

osTicket STS 1.2 - Attachment Remote Command Execution

osTicket STS 1.2 - Attachment Remote Command Execution source: https://www.securityfocus.com/bid/10586/info osTicket is reported prone to a remote command execution vulnerability. The issue is reported to present itself because attachments submitted as a part of a support ticket request are store...

osTicket STS 1.2 - Attachment Remote Command Execution

source: https://www.securityfocus.com/bid/10586/info osTicket is reported prone to a remote command execution vulnerability. The issue is reported to present itself because attachments submitted as a part of a support ticket request are stored with a predictable name in a known web accessible...