Unscored CVE-2005-2153 EUVD-2005-2154GHSA-63vq-qp86-c7m4

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL command…

Published Jul 6, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

References

1014373 vdb-entry
14127 vdb-entry
20050701 [SECURITY ALERT] osTicket bugs mailing-list