CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14750

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.033

EPSS Ranking 86.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-14750

Osticket » Osticket » Version: N/A

cpe:2.3:a:osticket:osticket:-
Osticket » Osticket » Version: 1.0

cpe:2.3:a:osticket:osticket:1.0
Osticket » Osticket » Version: 1.10.4

cpe:2.3:a:osticket:osticket:1.10.4
Osticket » Osticket » Version: 1.10.5

cpe:2.3:a:osticket:osticket:1.10.5
Osticket » Osticket » Version: 1.10.6

cpe:2.3:a:osticket:osticket:1.10.6
Osticket » Osticket » Version: 1.12

cpe:2.3:a:osticket:osticket:1.12
Osticket » Osticket » Version: 1.2.7

cpe:2.3:a:osticket:osticket:1.2.7
Osticket » Osticket » Version: 1.3.0

cpe:2.3:a:osticket:osticket:1.3.0
Osticket » Osticket » Version: 1.6

cpe:2.3:a:osticket:osticket:1.6
Osticket » Osticket » Version: 1.6.0

cpe:2.3:a:osticket:osticket:1.6.0
Osticket » Osticket » Version: 1.8.0

cpe:2.3:a:osticket:osticket:1.8.0
Osticket » Osticket » Version: 1.8.0.1

cpe:2.3:a:osticket:osticket:1.8.0.1
Osticket » Osticket » Version: 1.8.0.2

cpe:2.3:a:osticket:osticket:1.8.0.2
Osticket » Osticket » Version: 1.8.0.3

cpe:2.3:a:osticket:osticket:1.8.0.3
Osticket » Osticket » Version: 1.8.0.4

cpe:2.3:a:osticket:osticket:1.8.0.4
Osticket » Osticket » Version: 1.8.1

cpe:2.3:a:osticket:osticket:1.8.1
Osticket » Osticket » Version: 1.8.1.1

cpe:2.3:a:osticket:osticket:1.8.1.1
Osticket » Osticket » Version: 1.8.1.2

cpe:2.3:a:osticket:osticket:1.8.1.2
Osticket » Osticket » Version: 1.8.3

cpe:2.3:a:osticket:osticket:1.8.3
Osticket » Osticket » Version: 1.8.4

cpe:2.3:a:osticket:osticket:1.8.4
Osticket » Osticket » Version: 1.9.0

cpe:2.3:a:osticket:osticket:1.9.0
Osticket » Osticket » Version: 1.9.1

cpe:2.3:a:osticket:osticket:1.9.1
Osticket » Osticket » Version: 1.9.2

cpe:2.3:a:osticket:osticket:1.9.2
Osticket » Osticket » Version: 1.9.4

cpe:2.3:a:osticket:osticket:1.9.4
Osticket » Osticket » Version: 1.9.5

cpe:2.3:a:osticket:osticket:1.9.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14750

Products

Pricing

Contact Us