PT-2010-2362 · Osticket · Osticket

Nahuel Grisolía · Publicado 2010-02-11 · Atualizado 2010-02-12 · CVE-2010-0605

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.6.0 Stable

Description The issue allows remote authenticated users with "Staff" permissions to execute arbitrary SQL commands. This is achieved by exploiting the input parameter in the scp/ajax.php file.

Recommendations For versions prior to 1.6.0 Stable, update to version 1.6.0 Stable or later to resolve the issue. As a temporary workaround, consider restricting access to the scp/ajax.php file for users with "Staff" permissions until the update is applied.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-0605

Produtos afetados

Osticket

Referências · 8

• 🔥 http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/11380 · Exploit
• 🔥 http://securityfocus.com/bid/38166 · Exploit
• 🔥 http://exploit-db.com/exploits/11380 · Exploit
• http://osticket.com/forums/project.php?issueid=176 · Correção
• http://secunia.com/advisories/38515 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0605 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0605 · Nota