CVE-2021-45811

    Dashboard / Vulnerabilities / CVE-2021-45811

    CVE-2021-45811

    Published: 8 Sept 2023Last Modified: 7 Aug 2026

    Summary:

    Details: A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination.

    References: https://members.backbox.org/osticket-sql-injection/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d5ee0df82cde86f0ec7fd2726a156ab07929bd68
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-45811 | CVE-DB