CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-42235
https://notcve.org/view.php?id=CVE-2021-42235
04 May 2022 — SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality. Una inyección SQL en el proceso de inicio de sesión y restablecimiento de contraseña de osTicket versiones anteriores a 1.14.8 y 1.15.4, permite a atacantes acceder a la funcionalidad osTicket administration profile • https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-22609
https://notcve.org/view.php?id=CVE-2020-22609
28 Jun 2021 — Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php. Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Enhancesoft osTicket versiones anteriores a v1.12.6, por medio del parámetro queue-name en el archivo include/class.queue.php • https://github.com/osTicket/osTicket/commit/6c724ea3fe352d10d457d334dc054ef81917fde1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-22608
https://notcve.org/view.php?id=CVE-2020-22608
28 Jun 2021 — Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php. Una vulnerabilidad de tipo Cross Site Scripting en Enhancesoft osTicket versiones anteriores a v1.12.6, por medio del parámetro queue-name en el archivo include/ajax.search.php • https://github.com/osTicket/osTicket/commit/d54cca0b265128f119b6c398575175cb10cf1754 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 94%CPEs: 1EXPL: 4CVE-2020-24881 – osTicket 1.14.2 - SSRF
https://notcve.org/view.php?id=CVE-2020-24881
02 Nov 2020 — SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. Una vulnerabilidad de tipo SSRF se presenta en osTicket versiones anteriores a 1.14.3, donde un atacante puede agregar un archivo malicioso al servidor o llevar a cabo un escaneo de puertos osTicket 1.14.2 suffers from a server-side request forgery vulnerability. • https://www.exploit-db.com/exploits/49441 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-24917
https://notcve.org/view.php?id=CVE-2020-24917
30 Aug 2020 — osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php. osTicket versiones anteriores a 1.14.3, permite un ataque XSS por medio de un nombre de archivo diseñado en la función DraftAjaxAPI::_uploadInlineImage() en el archivo include/ajax.draft.php • https://github.com/osTicket/osTicket/commit/518de223933eab0c5558741ce317f36958ef193d • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2020-16193
https://notcve.org/view.php?id=CVE-2020-16193
26 Aug 2020 — osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. osTicket versiones anteriores a 1.14.3, permite un ataque de tipo XSS porque el archivo include/staff/banrule.inc.php presenta una llamada $info ["notes"] eco no comprobada • https://github.com/osTicket/osTicket/blob/develop/include/staff/banrule.inc.php#L67 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1CVE-2020-14012
https://notcve.org/view.php?id=CVE-2020-14012
10 Jun 2020 — scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. El archivo scp/categories.php en osTicket versión 1.14.2, permite un ataque de tipo XSS por medio de Knowledgebase Category Name o Category Description. El atacante debe ser un Agente • https://github.com/osTicket/osTicket/issues/5514 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 2CVE-2020-12629
https://notcve.org/view.php?id=CVE-2020-12629
04 May 2020 — include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. En el archivo include/class.sla.php en osTicket versiones anteriores a la versión 1.14.2, permite un ataque de tipo XSS por medio del Nombre SLA. • https://github.com/mkelepce/CVE-2020-12629 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 2CVE-2019-14748 – osTicket 1.12 - Persistent Cross-Site Scripting via File Upload
https://notcve.org/view.php?id=CVE-2019-14748
07 Aug 2019 — An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented for file content checks; also, the output is not handled properly, causing persistent XSS that leads to cookie stealing or malicious actions. For example, a non-agent user can upload a .html file, and Content-Disposition will be set to inline instead of attachment. Se det... • https://www.exploit-db.com/exploits/47224 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 3%CPEs: 2EXPL: 1CVE-2019-14749 – osTicket 1.12 - Formula Injection
https://notcve.org/view.php?id=CVE-2019-14749
07 Aug 2019 — An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input in the Name and Internal Notes fields in the Users tab, and the Issue Summary field in the tickets tab. This allows other agents to download data in a .csv file format or .xls file format. This is used as input for spreadsheet applications such as Excel and OpenOffice Cal... • https://www.exploit-db.com/exploits/47225 • CWE-1236: Improper Neutralization of Formula Elements in a CSV File •