← Database

CVE-2010-0606

LOW CVSS: 3.5 Published: 2010-02-11 Modified: 2026-07-10

Description

Cross-site scripting (XSS) vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users to inject arbitrary web script or HTML via the f parameter, possibly related to an error message generated by scp/admin.php.

Affected Platforms

Osticket OsticketEnhancesoft Osticket

Weakness Type

CWE-79

References