Browse CVEs

MEDIUM 5.4 CVE-2025-45387 osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php. Osticket 1.17.6 / 1.18.2+ Fix from $1,6002025-06-02 CRITICAL 9.8 CVE-2017-15580EPSS 16% osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's c… Osticket No fix yet Fix from $2,3002017-10-23 MEDIUM 6.1 CVE-2017-15362 osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. … Osticket Mitigation only Fix from $1,6002017-10-16 CRITICAL 9.8 CVE-2017-14396 In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstra… Osticket Patch available Fix from $2,3002017-09-12 HIGH 7.5 CVE-2005-2153 SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the … Osticket Sts No fix yet Fix from $1,9502005-07-06 HIGH 7.5 CVE-2005-2154 PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and pos… Osticket Sts No fix yet Fix from $1,9502005-07-06 HIGH 7.5 CVE-2005-1437 Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or … Osticket No fix yet Fix from $1,9502005-05-03 HIGH 7.5 CVE-2005-1438 PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter. Osticket Mitigation only Fix from $1,9502005-05-03 HIGH 7.5 CVE-2004-0613EPSS 10% osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to … Osticket Sts Patch available Fix from $1,9502004-12-06 MEDIUM 6.4 CVE-2004-0614 osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of… Osticket Sts Mitigation only Fix from $1,6002004-12-06