Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:03:16 +0000 cnvd-2017-32221 https://cve.radiocsirt.org/vuln/cnvd-2017-32221 cnvd-2017-32221 https://cve.radiocsirt.org/vuln/cnvd-2017-32221 EUVD-2026-78616 https://cve.radiocsirt.org/vuln/euvd-2026-78616 EUVD-2026-78616 https://cve.radiocsirt.org/vuln/euvd-2026-78616 fkie_cve-2017-15362 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15362 <p>osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.</p> <p>osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15362 GHSA-q9v5-48c9-9r2g https://cve.radiocsirt.org/vuln/ghsa-q9v5-48c9-9r2g <p>osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.</p> <p>osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID and data theft may follow as well as the possibility of bypassing CSRF protections, injection of iframes to establish communication channels, etc. The vulnerability is present after login into the application. This affects a different tickets.php file than CVE-2015-1176.</p> https://cve.radiocsirt.org/vuln/ghsa-q9v5-48c9-9r2g gsd-2017-15362 https://cve.radiocsirt.org/vuln/gsd-2017-15362 gsd-2017-15362 https://cve.radiocsirt.org/vuln/gsd-2017-15362