Osticket@1.3.0 Security Vulnerabilities and Issues — Osticket@1.3.0 CVE List

Lucene search

OsticketOsticket1.3.0

4 matches found

CVE•added 2010/02/11 5:30 p.m.•39 views

CVE-2010-0605

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

7.5CVSS8.2AI score0.00672EPSS

CVE•added 2010/02/11 5:30 p.m.•39 views

CVE-2010-0606

Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.

3.5CVSS5.5AI score0.00201EPSS

CVE•added 2014/07/09 2:55 p.m.•39 views

CVE-2014-4744

Multiple cross-site scripting (XSS) vulnerabilities in osTicket before 1.9.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone Number field to open.php or (2) Phone number field, (3) passwd1 field, (4) passwd2 field, or (5) do parameter to account.php.

4.3CVSS5.9AI score0.00256EPSS

CVE•added 2005/05/03 4:0 a.m.•34 views

CVE-2005-1436

Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the ...

6.8CVSS5.8AI score0.02076EPSS