NetSight
high7.5

CVE-2005-2153

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket var…

Impact

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

Affected products

VendorProductAffected versions
OsticketOsticket Sts
Versions 1.2, 1.2.7, 1.3_beta

References