Browse CVEs

CRITICAL 9.8 CVE-2017-15580EPSS 16% osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's c… Osticket No fix yet Fix from $2,3002017-10-23 MEDIUM 6.1 CVE-2017-15362 osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. … Osticket Mitigation only Fix from $1,6002017-10-16 HIGH 7.5 CVE-2005-2153 SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the … Osticket Sts No fix yet Fix from $1,9502005-07-06 HIGH 7.5 CVE-2005-2154 PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and pos… Osticket Sts No fix yet Fix from $1,9502005-07-06 HIGH 7.5 CVE-2005-1437 Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or … Osticket No fix yet Fix from $1,9502005-05-03 HIGH 7.5 CVE-2005-1438 PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter. Osticket Mitigation only Fix from $1,9502005-05-03 MEDIUM 6.4 CVE-2004-0614 osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of… Osticket Sts Mitigation only Fix from $1,6002004-12-06