VulnerabilityModified
CVE-2005-3639
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.
HIGH 7.5EPSS 2.75%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.75%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.75% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- ubertec/help center live
- Source
- cve@mitre.org
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.