cve/CVE-2020-16193.md at eda58812c5773678e9432b65209fee245db925e7 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-07 19:16:22 +00:00

marc 555e9c7de4 Update Sat May 25 21:48:12 CEST 2024

2024-05-25 21:48:12 +02:00

619 B

Raw Blame History

CVE-2020-16193

Description

osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.

POC

Reference

No PoCs from references.

Github