CVE-2009-2361

Description

References

• osticket.com/forums/project.php · Vendor Advisory
• secunia.com/advisories/35629 · Vendor Advisory
• exploit-db.com/exploits/9032
• ngenuity.org/wordpress/2009/06/26/osticket-admin-login-blind-sql-injection · Exploit
• osvdb.org/55472
• securityfocus.com/archive/1/504615/100/0/threaded
• securityfocus.com/bid/35516
• securitytracker.com/id
• vupen.com/english/advisories/2009/1726 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/51417

Weitere Schwachstellen in osticket

• CVE-2026-26895MITTEL 5.3User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the pl…
• CVE-2026-22200HOCH 7.5Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket P…
• CVE-2025-26241MITTEL 6.5A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket <=1.17.5 allows authenticated attackers to exe…
• CVE-2023-46967MITTEL 6.1Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to escalate privileges v…
• CVE-2023-27149MITTEL 4.8A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML …