CVE-2023-46967

Enhancesoft osTicket version 1.18.0 contains a Cross-Site Scripting (XSS) vulnerability within the sanitize function . This flaw allows a remote attacker to escalate privileges by submitting a crafted support ticket . While several sources confirm the existence of this vulnerability and its abili...

CVE-2020-24881

osTicket before version 1.14.3 contains CVE-2020-24881: a Server-Side Request Forgery (SSRF) flaw in the PDF/print path that lets an attacker cause the server to fetch internal resources or place malicious files on the server, enabling internal port scanning and information disclosure. The Nuclei...

CVE-2019-14750

osTicket prior to 1.12.1 and older than 1.10.7/1.12.x are affected by a stored XSS in setup/install.php due to lack of input sanitization in the firstname/lastname fields, which could enable injection and potentially cookie theft or related actions. The confirmed remediation is to upgrade to osTi...

CVE-2021-42235

osTicket is vulnerable to SQL injection in the login and password reset flow (CVE-2021-42235). Affected: osTicket before 1.14.8 and before 1.15.4. Impact: attacker could access the administration profile functionality. Remedy: upgrade to osTicket 1.14.8 or 1.15.4 or later.

CVE-2023-1318

osTicket (osticket/osticket) versions prior to 1.16.6 are affected by Cross-site Scripting (XSS) in a generic manner. The vulnerability is described as an XSS flaw in osTicket before 1.16.6, enabling execution of arbitrary JavaScript in the victim’s browser. Affected component is the web applicat...

CVE-2019-14749

Summary: CVE-2019-14749 affects osTicket before 1.10.7 and 1.12.x before 1.12.1, where the export spreadsheets feature can inject formulas (CSV/XLS) via unvalidated input in Name/Internal Notes (Users tab) and Issue Summary (Tickets tab). This can cause a Formula Injection in downloaded spreadshe...

CVE-2023-1319

CVE-2023-1319 concerns a stored Cross-site Scripting (XSS) vulnerability in the osTicket project (osticket/osticket) prior to version 1.16.6. The consolidated sources confirm an XSS flaw that persists when user-supplied input is stored and later reflected in responses, with public references tyin...

CVE-2019-14748

CVE-2019-14748 affects osTicket versions prior to 1.10.7 and 1.12.x prior to 1.12.1. The ticket creation form allows file uploads without sufficient content validation and improper output handling, causing persistent XSS (e.g., uploading a .html file) that can lead to cookie theft or malicious ac...

CVE-2022-4271

osTicket (osticket/osticket)

CVE-2023-1317

CVE-2023-1317 describes a reflected XSS in osTicket (osticket/osticket) prior to version 1.16.6. The visible impact is that an attacker could cause arbitrary JavaScript to run in a victim’s browser, potentially leading to data theft or unauthorized actions within the user session. The CVE is docu...

CVE-2023-1315

CVE-2023-1315: Reflected Cross-Site Scripting in osTicket prior to v1.16.6 (osticket/osticket). An attacker could cause arbitrary JavaScript to run in a victim’s browser. Affected component is the web interface; root cause is reflected XSS. Remediation: upgrade osTicket to a version >= 1.16.6....

CVE-2019-11537

CVE-2019-11537 affects osTicket prior to 1.12. An XSS flaw exists in file upload paths (/upload/file.php, /upload/scp/users.php?do=import-users, /upload/scp/ajax.php/users/import) when an agent manager uploads a crafted CSV to the User Importer, caused by error-message content echoing file conten...

CVE-2022-32074

CVE-2022-32074 affects the osTicket-plugins Storage-FS component (audit/class.audit.php). It is a stored XSS vulnerability where a crafted SVG file can cause arbitrary web scripts/HTML execution. The issue is linked to a commit in the repository (a7842d494889fd5533d13deb3c6a7789768795ae) as part ...

CVE-2023-1320

The CVE-2023-1320 entry concerns a stored XSS vulnerability in osticket/osticket prior to v1.16.6. The vulnerability affects the web application’s handling of user-supplied input, enabling an attacker to inject script that can be executed in an authenticated user’s browser, potentially accessing ...

CVE-2020-22609

CVE-2020-22609 is an XSS vulnerability in osTicket prior to v1.12.6. Affected component: include/class.queue.php; attacker can inject scripts via the queue-name parameter. Root cause: improper input handling leads to reflected/stored XSS (per the sources confirming the queue-name vector). Impact ...

CVE-2023-1316

CVE-2023-1316 is a stored XSS vulnerability in osticket/osticket prior to v1.16.6. Multiple connected sources corroborate that the issue affects osticket/osticket by storing malicious scripts (notably via an email field) and potentially allows data disclosure or scripting in affected sessions. Th...

CVE-2020-12629

The CVE concerns osTicket before 1.14.2, where include/class.sla.php is vulnerable to cross-site scripting via the SLA Name. Root cause is insufficient validation of client data in the SLA handling code. Impact described is client-side script execution via the SLA name field; exploitation details...

CVE-2020-22608

CVE-2020-22608 affects osTicket (Enhancesoft) prior to v1.12.6. A cross-site scripting vulnerability exists via the queue-name parameter in include/ajax.search.php. Impact is consistent with XSS as described in multiple sources; CVSS v3.1 base score 6.1 (NETWORK, LOW ATTACK COMPLEXITY, USER INTER...

CVE-2006-5407

CVE-2006-5407 : The NVD/CVE records indicate a PHP remote file inclusion vulnerability in open_form.php used by osTicket, exploitable via a URL in the include_dir parameter to execute arbitrary PHP code. The vulnerability affects the affected software component/function as described in the source...

CVE-2005-1439

CVE-2005-1439 : In osTicket, a directory traversal vulnerability exists in attachments.php that allows remote attackers to read arbitrary files via .. sequences in the file parameter. Evidence from multiple sources confirms a network-wide, unauthenticated remote attack vector with a base CVSS v2 ...

CVE-2020-16193

Summary of CVE-2020-16193 : osTicket

CVE-2020-24917

CVE-2020-24917 affects osTicket

CVE-2026-26895

osTicket version 1.18.2 is susceptible to a user enumeration vulnerability within the /pwreset.php file. This flaw allows remote attackers to identify and enumerate valid usernames registered on the platform. No specific remediation or exploit links are provided in the documents.