exploitDog

GHSA-63vq-qp86-c7m4

Опубликовано: 01 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2005-2153
http://seclists.org/lists/bugtraq/2005/Jul/0009.html
http://securitytracker.com/id?1014373
http://www.securityfocus.com/bid/14127

EPSS

Процентиль: 68%

0.01332

Низкий

CVE ID

Связанные уязвимости

CVE-2005-2153

nvd

около 21 года назад

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

CVE-2005-2153

debian

около 21 года назад

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta ...

EPSS

Процентиль: 68%

0.01332

Низкий

CVE ID