CVE-2010-0605

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Date published : 2010-02-11

http://www.securityfocus.com/bid/38166

http://osticket.com/forums/project.php?issueid=176