Description

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Remediation

References

CVE-2010-0605

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-6261)

WebLogic CVE-2023-22069 Vulnerability (CVE-2023-22069)

WordPress Plugin WP Design Maps & Places Cross-Site Scripting (1.2)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.29)

Joomla Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-10238)

Severity

High

Classification

CVE-2010-0605 CWE-138

Tags

Missing Update Known Vulnerabilities