CVE-2005-2153

CVE-2005-2153 affects osTicket 1.3.1 beta and earlier, where a vulnerability in the PHP file class.ticket.php allows a remote attacker to inject SQL via the ticket variable, enabling arbitrary SQL commands. This is a classic SQL injection flaw that can impact data integrity and confidentiality. T...

CVE-2004-0613

osTicket

CVE-2005-2154

CVE-2005-2154 concerns osTicket prior to or including 1.3.1 beta, where a PHP Local File Inclusion (LFI) flaw exists in the scripts view.php and open.php . The vulnerability arises from unsafely handling the inc parameter, enabling remote attackers to include and potentially execute arbitrary loc...

CVE-2004-0614

osTicket implements a trust-based upload size check using a hidden form field in the submit form, which could allow a remote attacker to upload a file of any size. Reported across CVE-2004-0614 with an impact of partial integrity and partial availability, potentially enabling a denial-of-service ...

CVE-2006-6733

Vulnerability summary (CVE-2006-6733) : A cross-site scripting (XSS) flaw exists in the web application module described as support/view.php within Support Cards 1 (osTicket) . The issue allows remote attackers to inject arbitrary web script or HTML via the e parameter. This affects the handling ...