Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.72%
Published
May 3, 2005
Modified
Jul 10, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
Affected Products (1)
References (6)