CVE-2005-1436 - CVE House
Back to Database
Status published Medium CVE-2005-1436

Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via (1) the t parameter to view.php, (2) the osticket_title parameter to header.php, (3) the em parameter to admin_login.php, (4) the e parameter to user_login.php, (5) the err parameter to open_submit.php, or (6) the name and subject fields when adding a ticket.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-1436

Credits & Attribution

No credits recorded in the NVD database.

References

More from enhancesoft

View All →
CVE-2022-32074
A stored cross-site scripting (XSS) vulnerability in the component audit/class.audit.php...
Medium 5.4
CVE-2022-31890
SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit...
Unknown 0
CVE-2022-31889
Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins...
Unknown 0
CVE-2022-31888
Session Fixation vulnerability in in function login in class.auth.php in...
Unknown 0
CVE-2021-45811
A SQL injection vulnerability in the "Search" functionality of "tickets.php"...
Medium 6.5

Affected Vendor

enhancesoft

View all reports →

Affected Software

osticket
Vulnerable Versions:
1.2.7, 1.3.0

Timeline

Official Publish: May 3rd, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.