Unscored CVE-2010-4634 EUVD-2010-4599GHSA-84vc-6wwx-27rm

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter …

Published Dec 30, 2010 · Updated Sep 17, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party

References

http://packetstormsecurity.org/1011-exploits/osticket-lfi.txt
[VIM] 20101109 osTicket 1.6 - Local File Inclusion mailing-list
44739 vdb-entry
[VIM] 20101109 osTicket 1.6 - Local File Inclusion mailing-list
15471 exploit