CVE-2005-2153: SQL Injection
Published Jul 6, 2005
·Updated
SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.
Affected Software
3 affected components
osTicket Osticket Sts=1.2
osTicket Osticket Sts=1.3_beta
osTicket Osticket Sts=1.2.7
Event History
Jul 6, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2153?
CVE-2005-2153 is considered a critical severity SQL injection vulnerability.
2
How do I fix CVE-2005-2153?
To fix CVE-2005-2153, upgrade to the latest version of osTicket that addresses this vulnerability.
3
What software versions are affected by CVE-2005-2153?
CVE-2005-2153 affects osTicket versions 1.2, 1.2.7, and 1.3.1 beta and earlier.
4
What type of attack can be executed with CVE-2005-2153?
CVE-2005-2153 allows remote attackers to execute arbitrary SQL commands.
5
Is CVE-2005-2153 remotely exploitable?
Yes, CVE-2005-2153 is remotely exploitable, allowing attackers to manipulate the database from a remote location.