Approved changes feed: RSS · Atom

cpe:2.3:a:osticket:osticket_sts:1.2.7:*:*:*:*:*:*:*

part: a version: 1.2.7 update: *

VendorOsticket (eb6b7f91-9003-595d-9b2a-e048d85decdd)
ProductOsticket Sts (1959aa78-85ca-5fe7-a8fe-9c321e9875f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/osticket/osticket purl2cpe 2026-06-01 10:11:00.279263

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-6733 vulnerable 2026-06-08 04:49:29.629209 Details available
Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject arbitrary web script or HTML via the e parameter.
Published: 2006-12-26T23:00:00.000Z
Updated: 2024-08-07T20:34:00.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2154 vulnerable 2026-06-08 04:48:28.532231 Details available
PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.
Published: 2005-07-06T04:00:00.000Z
Updated: 2024-09-16T22:40:05.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2153 vulnerable 2026-06-08 04:48:28.531094 Details available
SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.
Published: 2005-07-06T04:00:00.000Z
Updated: 2024-09-17T03:32:54.396Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.