Description (CNA)
Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to admin.php or (2) cat parameter to view.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.gulftech.org/?node=research&article_id=00071-05022005
- http://www.osvdb.org/16277
- http://secunia.com/advisories/15216
ADP enrichment
No English description supplied.