CVE-2005-2154

PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.

Affected products

Osticket

Osticket Osticket Sts

= 1.2, 1.2.7, 1.3_beta

CVSS 2.0

7.5 HIGH

EPSS

2.4% (83th percentile)

NVD status

Modified

Published

2005-07-06