Lucene search
MitreCVE-2014-4744HistoryJul 09, 2014 - 2:55 p.m.
CVE-2014-4744
2014-07-0914:55:04
CWE-79
mitre
web.nvd.nist.gov
25
xss
osticket
1.9.2
cve-2014-4744
nvd
web security
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
58.6%
Multiple cross-site scripting (XSS) vulnerabilities in osTicket before 1.9.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Phone Number field to open.php or (2) Phone number field, (3) passwd1 field, (4) passwd2 field, or (5) do parameter to account.php.
Affected configurations
Node
enhancesoftosticketMatch1.8.0
ORenhancesoftosticketMatch1.8.0rc1
ORenhancesoftosticketMatch1.8.0rc2
ORenhancesoftosticketMatch1.8.0.1
ORenhancesoftosticketMatch1.8.0.2
ORenhancesoftosticketMatch1.8.0.3
ORenhancesoftosticketMatch1.8.0.4
ORenhancesoftosticketMatch1.8.1rc1
ORenhancesoftosticketMatch1.8.1.1
ORenhancesoftosticketMatch1.8.1.2
ORenhancesoftosticketMatch1.8.3
ORenhancesoftosticketMatch1.8.4
ORenhancesoftosticketMatch1.9.0
ORosticketosticketRange≤1.9.1
ORosticketosticketMatch1.0
ORosticketosticketMatch1.2.7
ORosticketosticketMatch1.3.0
ORosticketosticketMatch1.6rc1
ORosticketosticketMatch1.6rc2
ORosticketosticketMatch1.6rc3
ORosticketosticketMatch1.6rc4
ORosticketosticketMatch1.6rc5
ORosticketosticketMatch1.6.0
ORosticketosticketMatch1.8.1
ORosticketosticketMatch1.8.1developer_preview
| Vendor | Product | Version | CPE |
|---|---|---|---|
| enhancesoft | osticket | 1.8.0 | cpe:2.3:a:enhancesoft:osticket:1.8.0:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0 | cpe:2.3:a:enhancesoft:osticket:1.8.0:rc1:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0 | cpe:2.3:a:enhancesoft:osticket:1.8.0:rc2:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0.1 | cpe:2.3:a:enhancesoft:osticket:1.8.0.1:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0.2 | cpe:2.3:a:enhancesoft:osticket:1.8.0.2:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0.3 | cpe:2.3:a:enhancesoft:osticket:1.8.0.3:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.0.4 | cpe:2.3:a:enhancesoft:osticket:1.8.0.4:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.1 | cpe:2.3:a:enhancesoft:osticket:1.8.1:rc1:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.1.1 | cpe:2.3:a:enhancesoft:osticket:1.8.1.1:*:*:*:*:*:*:* |
| enhancesoft | osticket | 1.8.1.2 | cpe:2.3:a:enhancesoft:osticket:1.8.1.2:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2014-07-09 14:55:00
nvd
nvd
CVE-2014-4744
2014-07-09 14:55:04
openvas
openvas
osTicket < 1.9.2 Multiple XSS Vulnerabilities - Active Check
2014-08-26 00:00:00
cvelist
cvelist
CVE-2014-4744
2014-07-09 14:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.9
Confidence
High
EPSS
0.002
Percentile
58.6%
Related for CVE-2014-4744