CVE-2010-0605

no score yetEPSS 3.0%

No CVSS score yet. EPSS 3.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

EPSS: 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-02-11
Modified: 2026-07-10
Record from: the NVD, synced 2026-10-19

Affected

enhancesoft:osticket
osticket:osticket

References

http://osticket.com/forums/project.php?issueid=176
http://packetstormsecurity.org/1002-exploits/osTicket-1.6-RC5-SQLi.pdf
http://secunia.com/advisories/38515
http://www.exploit-db.com/exploits/11380
http://www.securityfocus.com/bid/38166

Check your stack JSON