CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2025/06/02 12:00 a.m.•2 views

CVE-2025-45387: Improper Neutralization of Input During Web Page Generation

osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php...

5.4CVSS5.7AI score0.00247EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2010/02/11 12:00 a.m.•2 views

CVE-2010-0606: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php...

3.5CVSS6.1AI score0.00877EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2010/02/11 12:00 a.m.•4 views

CVE-2010-0605: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter...

7.5CVSS6.4AI score0.03048EPSS

SaveExploits2References6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by