CVE-2005-1436
Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.
- Affected products
- Osticket
- Enhancesoft Osticket
- = 1.2.7, 1.3.0
- CVSS 2.0
- 6.8 MEDIUM
- EPSS
- 1.7% (75th percentile)
- NVD status
- Modified
- Published
- 2005-05-03
CVE-2005-1436 at NVD
No indexed exploits for CVE-2005-1436 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2005-1436 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.