CVE-2004-0613 File upload in n/a
Remote attackers can upload PHP files to osTicket to execute arbitrary code or view sensitive files without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-0613?
CVE-2004-0613 is a high-severity vulnerability in n/a, published on 30 Jun 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
Which versions are affected by CVE-2004-0613?
It affects 1 product.
Products include Osticket Osticket Sts.
How do I fix CVE-2004-0613?
No fix has been published for CVE-2004-0613 yet. Limit exposure of the affected software until one is available.
Is CVE-2004-0613 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0613 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jcj4-h2pg-j964.