Search
Search Results (28 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2005-1436 | 1 Osticket | 1 Osticket | 2025-04-03 | N/A |
| Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket. | ||||
| CVE-2005-1439 | 1 Osticket | 1 Osticket | 2025-04-03 | N/A |
| Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. | ||||
| CVE-2005-2154 | 1 Osticket | 1 Osticket Sts | 2025-04-03 | N/A |
| PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter. | ||||
| CVE-2005-1438 | 1 Osticket | 1 Osticket | 2025-04-03 | N/A |
| PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter. | ||||
| CVE-2022-32074 | 1 Osticket | 1 Osticket | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13deb3c6a7789768795ae allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file. | ||||
| CVE-2020-24917 | 1 Osticket | 1 Osticket | 2024-11-21 | 6.1 Medium |
| osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php. | ||||
| CVE-2020-24881 | 1 Osticket | 1 Osticket | 2024-11-21 | 9.8 Critical |
| SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. | ||||
| CVE-2020-16193 | 1 Osticket | 1 Osticket | 2024-11-21 | 5.4 Medium |
| osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. | ||||