EDB-47224
functionalosTicket 1.12 - Persistent Cross-Site Scripting via File Upload
view exploit source exploit_dbverifiedtype webappsauthor Aishwarya Iyerpublished 2019-08-12catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14748US | medium5.4 | Exploit | ||
An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upl… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan