What’s Vulnerable › Vulnerabilities

CVE-2011-0456

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-03-11 · updated 2026-06-16
• Weakness: CWE-78

Description

webscript.pl in Open Ticket Request System (OTRS) 2.3.4 and earlier allows remote attackers to execute arbitrary commands via unspecified vectors, related to a "command injection vulnerability."

Affected products

• OTRS AG OTRS: through 2.3.4; 1.3.2, 1.3.3, 2.0.1, 2.0.2, 2.0.3, 2.0.4 (+22)

References

• http://jvn.jp/en/jp/JVN73162541/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019
• http://secunia.com/advisories/43960
• https://hermes.opensuse.org/messages/7797670
• http://jvn.jp/en/jp/JVN73162541/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000019
• http://secunia.com/advisories/43960
• https://hermes.opensuse.org/messages/7797670

Get alerted when CVE-2011-0456 or the next vulnerability affects your stack