EDB-9032
functionalosTicket 1.6 RC4 - Admin Login Blind SQL Injection
view exploit source exploit_dbverifiedtype webappsauthor Adam Baldwinpublished 2009-06-29catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-2361US | high7.5 | Exploit | ||
SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan