CVE-2005-3893
published 2005-11-29CVE-2005-3893: Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to…
PriorityP346high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
7.17%
93.5th percentile
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) user parameter in the Login action, and remote authenticated users via the (2) TicketID and (3) ArticleID parameters of the AgentTicketPlain action.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| otrs | otrs | — | — |
| otrs | otrs | — | — |
| otrs | otrs | — | — |
| otrs | otrs | — | — |
| otrs | otrs | — | — |
| otrs | otrs | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
exploitdb·2005-11-22
CVE-2005-3893 OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
---
source: https://www.securityfocus.com/bid/15537/info
OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
The application is prone to multiple SQL-injection vulnerabilities, an HTML-injection vulnerability, and multiple cross-site scripting vulnerabilities.
http://www.example.com/admin/index.pl?Action=AgentTicketPlain&ArticleID=1&TicketID=1%20[SQL_HERE]
http://www.example.com/admin/index.pl?Action=AgentTicketPlain&TicketID=1&ArticleID=1%20[SQL_HERE]
Exploit-DB
OTRS 2.0 - Login Function 'User' SQL Injection
exploitdb·2005-11-22
CVE-2005-3893 OTRS 2.0 - Login Function 'User' SQL Injection
OTRS 2.0 - Login Function 'User' SQL Injection
---
source: https://www.securityfocus.com/bid/15537/info
OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
The application is prone to multiple SQL-injection vulnerabilities, an HTML-injection vulnerability, and multiple cross-site scripting vulnerabilities.
http://www.example.com/index.pl?Action=Login&User=%27[SQL_HERE]
No writeups or analysis indexed.
http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.htmlhttp://marc.info/?l=bugtraq&m=113272360804853&w=2http://moritz-naumann.com/adv/0007/otrsmulti/0007.txthttp://otrs.org/advisory/OSA-2005-01-en/http://secunia.com/advisories/17685/http://secunia.com/advisories/18101http://secunia.com/advisories/18887http://securitytracker.com/id?1015262http://www.debian.org/security/2006/dsa-973http://www.novell.com/linux/security/advisories/2005_30_sr.htmlhttp://www.osvdb.org/21064http://www.osvdb.org/21065http://www.securityfocus.com/bid/15537/http://www.vupen.com/english/advisories/2005/2535https://exchange.xforce.ibmcloud.com/vulnerabilities/23352https://exchange.xforce.ibmcloud.com/vulnerabilities/23354http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.htmlhttp://marc.info/?l=bugtraq&m=113272360804853&w=2http://moritz-naumann.com/adv/0007/otrsmulti/0007.txthttp://otrs.org/advisory/OSA-2005-01-en/http://secunia.com/advisories/17685/http://secunia.com/advisories/18101http://secunia.com/advisories/18887http://securitytracker.com/id?1015262http://www.debian.org/security/2006/dsa-973http://www.novell.com/linux/security/advisories/2005_30_sr.htmlhttp://www.osvdb.org/21064http://www.osvdb.org/21065http://www.securityfocus.com/bid/15537/http://www.vupen.com/english/advisories/2005/2535https://exchange.xforce.ibmcloud.com/vulnerabilities/23352https://exchange.xforce.ibmcloud.com/vulnerabilities/23354
2005-11-29
Published