Description

** DISPUTED ** Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party.

Remediation

References

CVE-2010-4634

Related Vulnerabilities

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-5593)

MySQL Other Vulnerability (CVE-2010-3840)

WordPress Plugin Smart Marketing SMS and Newsletters Forms Security Bypass (2.6.1)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-7061)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4589)

Severity

Medium

Classification

CVE-2010-4634 CWE-22

Tags

Missing Update Known Vulnerabilities