CVE-2026-9507 | | | 2026-06-16 | A session fixation vulnerability has been identified in osTicket v1.18.2. This security flaw allows an attacker to hijack a victim’s account by keeping the ini… |
CVE-2026-26895 | Medium | 5.3 | 2026-04-02 | User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform. |
CVE-2026-22200 | High | 7.5 | 2026-01-12 | Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functiona… |
CVE-2025-26241 | Medium | 6.5 | 2025-05-05 | A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to execute arbitrary SQL… |
CVE-2023-46967 | Medium | 6.1 | 2024-02-20 | Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges via a crafted suppor… |
CVE-2023-27149 | Medium | 4.8 | 2023-10-23 | A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML via a crafted paylo… |
CVE-2023-27148 | Medium | 4.8 | 2023-10-23 | A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2021-45811 | Medium | 6.5 | 2023-09-08 | A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL co… |
CVE-2023-30082 | High | 7.5 | 2023-06-14 | A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket… |
CVE-2022-31890 | Critical | 9.8 | 2023-04-05 | SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order paramete… |
CVE-2022-31889 | Medium | 6.1 | 2023-04-05 | Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a778976879… |
CVE-2022-31888 | High | 8.8 | 2023-04-05 | Session Fixation vulnerability in in function login in class.auth.php in osTicket through 1.16.2. |
CVE-2023-1320 | Medium | 6.1 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1319 | Medium | 4.8 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1318 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1317 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1316 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1315 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2022-4271 | Medium | 5.4 | 2022-12-02 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. |
CVE-2022-32074 | Medium | 5.4 | 2022-07-13 | A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php of osTicket-plugins - Storage-FS before commit a7842d494889fd5533d13de… |
CVE-2021-42235 | Critical | 9.8 | 2022-05-04 | SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionalit… |
CVE-2020-22609 | Medium | 6.1 | 2021-06-28 | Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php. |
CVE-2020-22608 | Medium | 6.1 | 2021-06-28 | Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php. |
CVE-2020-24881 | Critical | 9.8 | 2020-11-02 | SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. |
CVE-2020-24917 | Medium | 6.1 | 2020-08-30 | osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php. |
CVE-2020-16193 | Medium | 5.4 | 2020-08-26 | osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. |
CVE-2020-14012 | Medium | 5.4 | 2020-06-10 | scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. |
CVE-2020-12629 | Medium | 5.4 | 2020-05-04 | include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. |
CVE-2019-14750 | Medium | 6.1 | 2019-08-07 | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization… |
CVE-2019-14749 | High | 8.8 | 2019-08-07 | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These… |
CVE-2019-14748 | Medium | 5.4 | 2019-08-07 | An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was fo… |
CVE-2019-13397 | Medium | 6.1 | 2019-07-09 | Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file ex… |
CVE-2019-11537 | Medium | 6.1 | 2019-04-25 | In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user… |
CVE-2018-7196 | Medium | 6.1 | 2018-03-27 | Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML… |
CVE-2018-7195 | High | 8.1 | 2018-03-27 | Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail address is known) by leveraging guest access… |
CVE-2018-7194 | Medium | 4.9 | 2018-03-27 | Integer format vulnerability in the ticket number generator in Enhancesoft osTicket before 1.10.2 allows remote attackers to cause a denial-of-service (prevent… |
CVE-2018-7193 | Medium | 6.1 | 2018-03-27 | Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or… |
CVE-2018-7192 | Medium | 6.1 | 2018-03-27 | Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web scr… |
CVE-2015-1347 | | | 2015-01-23 | Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the la… |
CVE-2015-1176 | | | 2015-01-23 | Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2014-4744 | | | 2014-07-09 | Multiple cross-site scripting (XSS) vulnerabilities in osTicket before 1.9.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone Nu… |
CVE-2010-4634 | | | 2010-12-30 | Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a dif… |
CVE-2010-0606 | | | 2010-02-11 | Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HT… |
CVE-2010-0605 | | | 2010-02-11 | SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary S… |
CVE-2009-2361 | | | 2009-07-08 | SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff usern… |
CVE-2006-5407 | | | 2006-10-19 | PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir paramet… |
CVE-2005-1439 | | | 2005-05-03 | Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter. |
CVE-2005-1436 | | | 2005-05-03 | Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.p… |