Browse CVEs

MEDIUM 6.1 CVE-2018-7192 Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitra… Osticket after 1.10.1 Fix from $1,6002018-03-27 MEDIUM 6.1 CVE-2018-7193 Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web … Osticket after 1.10.1 Fix from $1,6002018-03-27 MEDIUM 6.1 CVE-2018-7196 Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web scri… Osticket after 1.10.1 Fix from $1,6002018-03-27 MEDIUM 5.0 CVE-2010-4634 Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.… Osticket No fix yet Fix from $1,6002010-12-30 HIGH 7.5 CVE-2010-0605 SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute a… Osticket after 1.6 Fix from $1,9502010-02-11 HIGH 7.5 CVE-2009-2361EPSS 5% SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the s… Osticket after 1.6 Fix from $1,9502009-07-08 HIGH 7.5 CVE-2006-5407 PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_d… Osticket Mitigation only Fix from $1,9502006-10-19 HIGH 7.5 CVE-2005-1439 Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file paramet… Osticket Mitigation only Fix from $1,9502005-05-03 MEDIUM 6.8 CVE-2005-1436 Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter… Osticket No fix yet Fix from $1,6002005-05-03