← Back

Osticket

osticket

Vendor: Enhancesoft • 45 CVEs

CVEs (45)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-0605
2Enhancesoft
Osticket
2Osticket
Osticket
Jul 10, 2026
Feb 11, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.
CVE-2009-2361
2Enhancesoft
Osticket
2Osticket
Osticket
Jul 10, 2026
Jul 8, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter.
CVE-2006-5407
2Enhancesoft
Osticket
2Osticket
Osticket
Jul 10, 2026
Oct 19, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter.
CVE-2005-1439
2Enhancesoft
Osticket
2Osticket
Osticket
Jul 10, 2026
May 3, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
CVE-2005-1436
2Enhancesoft
Osticket
2Osticket
Osticket
Jul 10, 2026
May 3, 2005
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the e...Show more
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.Show less