PT-2006-3020 · Osticket+1 · Osticket+1

Published 2006-04-26 · Updated 2017-07-20 · CVE-2006-2039

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Help Center Live versions prior to 2.1.0

Description The issue concerns SQL injection vulnerabilities in the osTicket module. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 2.1.0, update to version 2.1.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-2039

Affected Products

Help Center Live

Osticket

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-2039 · Security Note
• http://securityfocus.com/bid/17676 · Patch
• http://secunia.com/advisories/19776 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1492 · Note
• http://sourceforge.net/project/shownotes.php?release_id=411859 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26040 · Note