← Database

CVE-2010-0605

HIGH CVSS: 7.5 Published: 2010-02-11 Modified: 2026-07-10

Description

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Affected Platforms

Osticket OsticketEnhancesoft Osticket

Weakness Type

CWE-89

References