cve/2018/CVE-2018-7196.md
2024-05-26 14:27:05 +02:00

634 B

CVE-2018-7196

Description

Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTicket before 1.10.2 allows remote attackers to inject arbitrary web script or HTML via the "sort" parameter.

POC

Reference

No PoCs from references.

Github