Description
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.
References
- 20040621 Multiple osTicket exploits! mailing-list
- osticket-php-file-upload(16477) vdb-entry