Description

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Remediation

References

CVE-2010-0605

Related Vulnerabilities

Oracle Database Server CVE-2012-1746 Vulnerability (CVE-2012-1746)

Liferay DXP Inefficient Regular Expression Complexity Vulnerability (CVE-2022-42124)

WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)

phpList Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-2916)

WordPress Plugin Product Reviews Import Export for WooCommerce Cross-Site Request Forgery (1.3.2)

Severity

High

Classification

CVE-2010-0605 CWE-138

Tags

Missing Update Known Vulnerabilities