Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket prior to 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
osticket osticket 1.2.7 |
||
osticket osticket 1.6 |
||
osticket osticket |
||
osticket osticket 1 |
||
osticket osticket 1.3.0 |