CVE-2005-2154: High severity osTicket Osticket Sts vulnerability
PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2154?
CVE-2005-2154 is classified as a high-severity vulnerability due to its potential for remote file inclusion and arbitrary code execution.
How do I fix CVE-2005-2154?
To fix CVE-2005-2154, upgrade osTicket to version 1.3.1 beta or later to mitigate the local file inclusion vulnerability.
What are the affected versions in CVE-2005-2154?
CVE-2005-2154 affects osTicket versions 1.2, 1.2.7, and all 1.3 beta releases.
Can CVE-2005-2154 be exploited remotely?
Yes, CVE-2005-2154 can be exploited remotely, allowing attackers to include local files on the server.
What components are vulnerable in CVE-2005-2154?
The vulnerable components in CVE-2005-2154 are the view.php and open.php files in the osTicket application.