High

DATE	CVE	VULNERABILITY TITLE	RISK
2005-07-06	CVE-2005-2154	Input Validation vulnerability in OSTicket PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter. network low complexity osticket	7.5
2005-07-06	CVE-2005-2153	Input Validation vulnerability in OSTicket SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable. network low complexity osticket	7.5
2004-12-06	CVE-2004-0613	Remote Command Execution vulnerability in Osticket STS 1.2 osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory. network low complexity osticket	7.5