Description
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
References
- http://www.gulftech.org/?node=research&article_id=00071-05022005
- 15216 third-party-advisory
- 16279 vdb-entry