Remote Code Execution Vulnerability in osTicket by osTicket Team

CVE-2004-0613

What is CVE-2004-0613?

osTicket has a vulnerability that permits remote attackers to gain unauthorized access to uploaded files. This exploit occurs when an attacker uploads a malicious PHP file to the ticket attachments directory, potentially allowing them to execute arbitrary code on the server. This vulnerability puts sensitive user data at risk and can lead to further exploitation if not mitigated.

References