PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote malicious users to execute arbitrary PHP code via a URL in the include_dir parameter.
osticket osticket