EDB-46753
functionalosTicket 1.11 - Cross-Site Scripting / Local File Inclusion
view exploit source exploit_dbverifiedtype webappsauthor AkkuSpublished 2019-04-25catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-11537US | medium6.1 | Exploit | ||
In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .c… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan