Vulnerabilities > Enhancesoft > Osticket > 1.15.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-08 | CVE-2021-45811 | SQL Injection vulnerability in Enhancesoft Osticket A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination. | 6.5 |
| 2023-03-10 | CVE-2023-1315 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. | 5.4 |
| 2023-03-10 | CVE-2023-1316 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | 5.4 |
| 2023-03-10 | CVE-2023-1317 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. | 5.4 |
| 2023-03-10 | CVE-2023-1318 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6. | 5.4 |
| 2023-03-10 | CVE-2023-1319 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | 4.8 |
| 2023-03-10 | CVE-2023-1320 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. | 6.1 |
| 2022-12-02 | CVE-2022-4271 | Cross-site Scripting vulnerability in Enhancesoft Osticket Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4. | 5.4 |