Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
osTicket New Ticket附件远程命令执行漏洞
Vulnerability Description
osTicket是一款基于WEB的客户服务管理程序。 osTicket的上传功能实现存在问题，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。 用户建立一个新的ticket，然后以这个ticket上传一个文件，就可以用以下方式访问： www.example.com/osticket/attachments/ 如果用户上传的PHP文档包含如下内容： <?PHP echo "<form action = ''><input type = 'text' name = 'cmd' value =
CVSS Information
N/A
Vulnerability Type
N/A