Description

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

Remediation

References

CVE-2005-1438

Related Vulnerabilities

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Request Forgery (1.23.3)

WordPress Plugin IMDb Profile Widget Local File Inclusion (1.0.8)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5320)

Drupal Core 4.7.x Cross-Site Scripting (4.7.0 - 4.7.2)

YUI Library Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4940)

Severity

High

Classification

CVE-2005-1438

Tags

Missing Update Known Vulnerabilities