CVE-2005-2153

Description

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-2154

http://www.securityfocus.com/bid/14127

http://securitytracker.com/id?1014373

http://seclists.org/lists/bugtraq/2005/Jul/0009.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS