This host is running Open Ticket Request System (OTRS) and is prone to multiple Cross-site scripting Vulnerabilities.

Successful exploitation will allow attackers to insert arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site and steal cookie-based authentication credentials. Impact Level: Application

Upgrade to Open Ticket Request System (OTRS) version 2.4.10 or 3.0.7 or later For updates refer to http://otrs.org/download/ or Apply patch from the vendor advisory link http://otrs.org/advisory/OSA-2011-01-en

The flaw is caused by improper validation of user-supplied input by multiple scripts. A remote attacker could exploit this vulnerability using various parameters in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site.

Open Ticket Request System (OTRS) version 2.4.x before 2.4.10 and 3.x before 3.0.7

Get the installed version of OTRS with the help of detect NVT and check the version is vulnerable or not.

• http://otrs.org/advisory/OSA-2011-01-en/
• http://secunia.com/advisories/44029
• http://xforce.iss.net/xforce/xfdb/66698

---

Updated on 2015-03-25