PT-2010-2362 · Osticket · Osticket

Nahuel Grisolía · Published 2010-02-11 · Updated 2010-02-12 · CVE-2010-0605

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions osTicket versions prior to 1.6.0 Stable

Description The issue allows remote authenticated users with "Staff" permissions to execute arbitrary SQL commands. This is achieved by exploiting the input parameter in the scp/ajax.php file.

Recommendations For versions prior to 1.6.0 Stable, update to version 1.6.0 Stable or later to resolve the issue. As a temporary workaround, consider restricting access to the scp/ajax.php file for users with "Staff" permissions until the update is applied.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2010-0605

Affected Products

Osticket

References · 8

• 🔥 http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/11380 · Exploit
• 🔥 http://securityfocus.com/bid/38166 · Exploit
• 🔥 http://exploit-db.com/exploits/11380 · Exploit
• http://osticket.com/forums/project.php?issueid=176 · Patch
• http://secunia.com/advisories/38515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0605 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0605 · Note