| Package | Affected versions | Patched versions |
|---|---|---|
| osticket | ≥ 1.15, < 1.15.4< 1.14.8 | 1.15.41.14.8 |
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free