CVE-2010-0605: SQL Injection
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0605?
CVE-2010-0605 is considered a medium severity SQL injection vulnerability that can allow remote authenticated users with staff permissions to execute arbitrary SQL commands.
How do I fix CVE-2010-0605?
To fix CVE-2010-0605, you should upgrade to osTicket version 1.6.0 Stable or later, which resolves the SQL injection vulnerability.
Who is affected by CVE-2010-0605?
CVE-2010-0605 affects users of osTicket versions up to and including 1.6-rc5 and versions 1.2.7 and earlier.
What are the potential impacts of exploiting CVE-2010-0605?
Exploiting CVE-2010-0605 can lead to unauthorized access to the database, allowing attackers to manipulate or extract sensitive information.
Is CVE-2010-0605 a vulnerabilities specific to certain user roles?
Yes, CVE-2010-0605 specifically affects remote authenticated users with 'Staff' permissions in osTicket.