open_ticket_request_system Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/open_ticket_request_system/ Sun, 26 Feb 2023 06:48:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png open_ticket_request_system Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/open_ticket_request_system/ 32 32 CVE-2018-19141 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19141/ Sun, 26 Feb 2023 06:48:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19141/ Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.

The post CVE-2018-19141 appeared first on CVE Vulnerability.

]]> Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled.

The post CVE-2018-19141 appeared first on CVE Vulnerability.

]]> CVE-2018-19142 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19142/ Sun, 26 Feb 2023 06:48:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19142/ Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.

The post CVE-2018-19142 appeared first on CVE Vulnerability.

]]> Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.

The post CVE-2018-19142 appeared first on CVE Vulnerability.

]]> CVE-2018-19143 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19143/ Sun, 26 Feb 2023 06:48:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19143/ Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled.

The post CVE-2018-19143 appeared first on CVE Vulnerability.

]]> Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled.

The post CVE-2018-19143 appeared first on CVE Vulnerability.

]]> CVE-2018-16586 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16586/ Sun, 26 Feb 2023 06:47:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16586/ In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources.

The post CVE-2018-16586 appeared first on CVE Vulnerability.

]]> In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources.

The post CVE-2018-16586 appeared first on CVE Vulnerability.

]]> CVE-2018-16587 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16587/ Sun, 26 Feb 2023 06:47:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16587/ In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.

The post CVE-2018-16587 appeared first on CVE Vulnerability.

]]> In Open Ticket Request System (OTRS) 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a user with admin permissions opens it, it causes deletions of arbitrary files that the OTRS web server user has write access to.

The post CVE-2018-16587 appeared first on CVE Vulnerability.

]]> CVE-2018-14593 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14593/ Sun, 26 Feb 2023 06:46:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14593/ An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.

The post CVE-2018-14593 appeared first on CVE Vulnerability.

]]> An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x through 4.0.30. An attacker who is logged into OTRS as an agent may escalate their privileges by accessing a specially crafted URL.

The post CVE-2018-14593 appeared first on CVE Vulnerability.

]]>