CVE-2014-4744

Published: Jul 9, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in osTicket before 1.9.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone Number field to open.php or (2) Phone number field, (3) passwd1 field, (4) passwd2 field, or (5) do parameter to account.php.

Affected (25)

Products: Enhancesoft: Osticket · Osticket: Osticket

Enhancesoft

1 product

Osticket

1 product

Osticket

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Enhancesoft Osticket	Version 1.8.0.1
Enhancesoft Osticket	Version 1.8.0.2
Enhancesoft Osticket	Version 1.8.0.3
Enhancesoft Osticket	Version 1.8.0.4
Enhancesoft Osticket	Version 1.8.0
Enhancesoft Osticket	Version 1.8.0 rc1
Enhancesoft Osticket	Version 1.8.0 rc2
Enhancesoft Osticket	Version 1.8.1.1
Enhancesoft Osticket	Version 1.8.1.2
Enhancesoft Osticket	Version 1.8.1 rc1
Enhancesoft Osticket	Version 1.8.3
Enhancesoft Osticket	Version 1.8.4
Enhancesoft Osticket	Version 1.9.0
Osticket Osticket	Up to 1.9.1
Osticket Osticket	Version 1.0
Osticket Osticket	Version 1.2.7
Osticket Osticket	Version 1.3.0
Osticket Osticket	Version 1.6.0
Osticket Osticket	Version 1.6 rc1
Osticket Osticket	Version 1.6 rc2
Osticket Osticket	Version 1.6 rc3
Osticket Osticket	Version 1.6 rc4
Osticket Osticket	Version 1.6 rc5
Osticket Osticket	Version 1.8.1
Osticket Osticket	Version 1.8.1 developer_preview