Description

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.

Remediation

References

CVE-2021-42235

Related Vulnerabilities

phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6626)

WordPress Plugin User Control SQL Injection (2.1.0)

Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-37699)

WordPress Plugin Calendar Cross-Site Scripting (1.3.7)

WordPress Plugin Google Maps by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (1.2.1)

Severity

Critical

Classification

CVE-2021-42235 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities