Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2010-0605

Published: 11/02/2010 Updated: 12/02/2010
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Osticket

Vulnerability Summary

SQL injection vulnerability in scp/ajax.php in osTicket prior to 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

osticket osticket 1.2.7

osticket osticket 1.6

osticket osticket 1.3.0

osticket osticket 1

osticket osticket

Exploits

Exploit DB: osTicket 1.6 RC5 - Multiple Vulnerabilities
Advisory Name: SQL injection in osTicket Vulnerability Class: SQL injection Release Date: 2010-02-09 Affected Applications: Confirmed in osTicket 16 RC5 Other versions may also be affected Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9 (AV:N/AC:L/Au:S/C:C/I:C/A:C) Researcher: Nahuel Grisolía Vendor Status ...

References

CWE-89http://www.exploit-db.com/exploits/11380http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdfhttp://osticket.com/forums/project.php?issueid=176http://secunia.com/advisories/38515http://www.securityfocus.com/bid/38166https://nvd.nist.govhttps://www.exploit-db.com/exploits/11380/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook