CVE-2010-0605: Enhancesoft Osticket

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to execute arbitrary SQL commands via the input parameter.

Affected products

• Enhancesoft Osticket: up to and including 1.6; version 1.2.7 only; version 1.3.0 only; version 1.6 only
• Osticket Osticket: version 1 only

Published 2010-02-11. Last modified 2026-07-10.