EDB-47226

functional

osTicket 1.12 - Persistent Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor Aishwarya Iyerpublished 2019-08-12catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-14750USmedium6.1Exploit
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the f…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan