EDB-45169

PoC

osTicket 1.10.1 - Arbitrary File Upload

view exploit source exploit_dbtype webappsauthor Rajwinder Singhpublished 2018-08-08catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2017-15580UScritical9.8Exploit
osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly validate the uploaded file's contents and thus accepts any ty…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan