otrs2: sql injection
| Package(s): | otrs2 | CVE #(s): | CVE-2013-4717 CVE-2013-2625 | ||||||||||||||||
| Created: | August 5, 2013 | Updated: | August 13, 2013 | ||||||||||||||||
| Description: | From the Debian advisory:
It was discovered that otrs2, the Open Ticket Request System, does not properly sanitize user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue to craft SQL queries by injecting arbitrary SQL code through manipulated URLs. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||