CVE-2021-45811 | BDVDB-2026-211476 Detail

Description#

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://members.backbox.org/osticket-sql-injection/

Exploit#

No public exploit known

History#

Version 12023-09-08Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.