CVE-2010-4634

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-30 · updated 2026-07-10
Weakness: CWE-22

Description

Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439. NOTE: this issue has been disputed by a reliable third party

Affected products

osticket/osticket: 1.6

References

http://packetstormsecurity.org/1011-exploits/osticket-lfi.txt
http://www.attrition.org/pipermail/vim/2010-November/002468.html
http://www.attrition.org/pipermail/vim/2010-November/002469.html
http://www.exploit-db.com/exploits/15471
http://www.securityfocus.com/bid/44739
http://packetstormsecurity.org/1011-exploits/osticket-lfi.txt
http://www.attrition.org/pipermail/vim/2010-November/002468.html
http://www.attrition.org/pipermail/vim/2010-November/002469.html
http://www.exploit-db.com/exploits/15471
http://www.securityfocus.com/bid/44739

Get alerted when CVE-2010-4634 or the next vulnerability affects your stack