EDB-36842

PoC

OTRS < 3.1.x / < 3.2.x / < 3.3.x - Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Adam Ziajapublished 2015-04-27catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2014-1695US	medium4.3	4.90% (92nd)	Exploit	2014-03-01
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 allows remote attackers to inject arb…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.