CVEvulnerability

CVE-2005-3639

7.5 HIGH Published 2005-11-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

PHP file inclusion vulnerability in the osTicket module in Help Center Live before 2.0.3 allows remote attackers to access or include arbitrary files via the file parameter, possibly due to a directory traversal vulnerability.

Affected configurations

• ubertec help center live (<= 2.0.2)

References