PT-2006-3020 · Osticket+1 · Osticket+1

Publicado 2006-04-26 · Atualizado 2017-07-20 · CVE-2006-2039

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Help Center Live versions prior to 2.1.0

Description The issue concerns SQL injection vulnerabilities in the osTicket module. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-2039

Produtos afetados

Help Center Live

Osticket

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-2039 · Nota de Segurança
• http://vupen.com/english/advisories/2006/1492 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=411859 · Nota
• http://securityfocus.com/bid/17676 · Correção
• http://secunia.com/advisories/19776 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26040 · Nota