Description
Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP-Members Membership Unspecified Vulnerability (3.1.9.2)
Oracle Application Server Other Vulnerability (CVE-2007-0282)
Oracle Database Server CVE-2006-5337 Vulnerability (CVE-2006-5337)
WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)
WordPress Plugin Integrator 'redirect_to' Parameter Cross-Site Scripting (1.32)