CVE-2019-14750

MediumCVSS 6.1/10Last modified Jul 10, 2026

Description

An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insertion of malicious queries in those fields leads to the execution of those queries. This can further lead to cookie stealing or other malicious actions.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/154005/osTicket-1.12-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://github.com/osTicket/osTicket/commit/c3ba5b78261e07a883ad8fac28c214486c854e12Patch, Third Party Advisory
https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
https://github.com/osTicket/osTicket/releases/tag/v1.12.1Release Notes, Third Party Advisory
https://www.exploit-db.com/exploits/47226Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/154005/osTicket-1.12-Cross-Site-Scripting.htmlThird Party Advisory, VDB Entry
https://github.com/osTicket/osTicket/commit/c3ba5b78261e07a883ad8fac28c214486c854e12Patch, Third Party Advisory
https://github.com/osTicket/osTicket/releases/tag/v1.10.7Release Notes, Third Party Advisory
https://github.com/osTicket/osTicket/releases/tag/v1.12.1Release Notes, Third Party Advisory
https://www.exploit-db.com/exploits/47226Third Party Advisory, VDB Entry

Timeline

Published: Aug 7, 2019
Last modified: Jul 10, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-147517.5NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) i CVE-2019-147526.1SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.CVE-2019-147537.5SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow CVE-2019-147549.8Open-School 3.0, and Community Edition 2.3, allows SQL Injection via the index.php?r=students/students/document id parameter.CVE-2019-147558.8The profile photo upload feature in Leaf Admin 61.9.0212.10 f allows Unrestricted Upload of a File with a Dangerous Type.CVE-2019-147566.1An issue was discovered in KaiOS 1.0, 2.5, and 2.5.12.5. The pre-installed Email application is vulnerable to HTML and JavaScript injection CVE-2019-147576.1An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed Contacts application is vulnerable to HTML and JavaScript injection attack CVE-2019-147586.1An issue was discovered in KaiOS 2.5 and 2.5.1. The pre-installed File Manager application is vulnerable to HTML and JavaScript injection at CVE-2019-147594.4An issue was discovered in KaiOS 1.0, 2.5, and 2.5.1. The pre-installed Radio application is vulnerable to HTML and JavaScript injection att CVE-2019-14767.8An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El CVE-2019-147604.4An issue was discovered in KaiOS 2.5. The pre-installed Recorder application is vulnerable to HTML and JavaScript injection attacks. A local CVE-2019-147614.4An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local att