CVE-2010-0605
published 2010-02-11CVE-2010-0605: SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary…
PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.05%
85.9th percentile
SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| osticket | osticket | <= 1.6 | — |
| osticket | osticket | — | — |
| osticket | osticket | — | — |
| osticket | osticket | — | — |
| osticket | osticket | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
GPL NETBIOS DCERPC Remote Activation bind attempt
suricata·2010-09-23
CVE-2003-0528 GPL NETBIOS DCERPC Remote Activation bind attempt
GPL NETBIOS DCERPC Remote Activation bind attempt
Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 135 (msg:"GPL NETBIOS DCERPC Remote Activation bind attempt"; flow:established,to_server; content:"|05|"; content:"|0B|"; within:1; distance:1; byte_test:1,&,1,0,relative; content:"|B8|J|9F|M|1C|}|CF 11 86 1E 00| |AF|n|7C|W"; within:16; distance:29; tag:session,5,packets; reference:bugtraq,8234; reference:bugtraq,8458; reference:cve,2003-0528; reference:cve,2003-0605; reference:cve,2003-0715; reference:nessus,11798; reference:nessus,11835; reference:url,www.microsoft.com/technet/security/bulletin/MS03-039.mspx; classtype:attempted-admin; sid:2102251; rev:17; metadata:created_at 2010_09_23, cve CVE_2003_0528, signature_severity Informational, updated_at 2024_03_08;)
No writeups or analysis indexed.
http://osticket.com/forums/project.php?issueid=176http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdfhttp://secunia.com/advisories/38515http://www.exploit-db.com/exploits/11380http://www.securityfocus.com/bid/38166http://osticket.com/forums/project.php?issueid=176http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdfhttp://secunia.com/advisories/38515http://www.exploit-db.com/exploits/11380http://www.securityfocus.com/bid/38166
2010-02-11
Published