Description

Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.

Remediation

References

CVE-2005-1439

Related Vulnerabilities

Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0 - 6.20)

Joomla! Core Security Bypass (2.5.0 - 3.9.18)

WordPress Plugin Advanced Access Manager Cross-Site Scripting (6.7.9)

MySQL CVE-2013-3811 Vulnerability (CVE-2013-3811)

Werkzeug WSGI Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-14322)

Severity

High

Classification

CVE-2005-1439

Tags

Missing Update Known Vulnerabilities