Browse CVEs

HIGH 7.5 CVE-2023-30082 A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using th… Osticket No fix yet Fix from $1,9502023-06-14 MEDIUM 5.4 CVE-2020-14012 scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. Osticket No fix yet Fix from $1,6002020-06-10 MEDIUM 6.1 CVE-2019-13397 Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitra… Osticket Mitigation only Fix from $1,6002019-07-09 MEDIUM 5.0 CVE-2010-4634 Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.… Osticket No fix yet Fix from $1,6002010-12-30 HIGH 7.5 CVE-2006-5407 PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_d… Osticket Mitigation only Fix from $1,9502006-10-19 HIGH 7.5 CVE-2005-1439 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file paramet… Osticket Mitigation only Fix from $1,9502005-05-03 MEDIUM 6.8 CVE-2005-1436 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter… Osticket No fix yet Fix from $1,6002005-05-03