Approved changes feed: RSS · Atom

cpe:2.3:a:osticket:osticket:1.10:*:*:*:*:*:*:*

part: a version: 1.10 update: *

VendorOsticket (eb6b7f91-9003-595d-9b2a-e048d85decdd)
ProductOsticket (b8691a4e-029a-54ed-89df-dc236e440125)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/osticket/osticket purl2cpe 2026-06-01 10:11:00.283869

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14396 vulnerable 2026-06-08 05:08:49.903435 Details available
In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.
Published: 2017-09-12T21:00:00.000Z
Updated: 2024-08-05T19:27:40.637Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.