high7.5
CVE-2011-0456
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a…
Impact
webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Otrs | through 2.3.4 Versions 1.3.2, 1.3.3, 2.0.1, 2.0.2, 2.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN73162541/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019
- http://secunia.com/advisories/43960
- https://hermes.opensuse.org/messages/7797670
- http://jvn.jp/en/jp/JVN73162541/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019
- http://secunia.com/advisories/43960
- https://hermes.opensuse.org/messages/7797670