CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

CNVD•added 2020/08/31 12:0 a.m.•4 views

osTicket cross-site scripting vulnerability (CNVD-2020-50538)

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.14.3. The vulnerability can be exploited to conduct a cross-site scripting attack via a specially crafted filename for...

6.1CVSS6.2AI score0.01215EPSS

SaveExploits0References1

NVD•added 2020/08/30 4:15 p.m.•24 views

CVE-2020-24917

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

6.1CVSS5.9AI score0.01215EPSS

SaveExploits0References3

Prion•added 2020/08/30 4:15 p.m.•22 views

Cross site scripting

osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::uploadInlineImage in include/ajax.draft.php...

4.3CVSS5.8AI score0.01215EPSS

SaveExploits0References3Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by