{"api_version":"1","generated_at":"2026-07-23T12:15:07+00:00","cve":"CVE-2005-2154","urls":{"html":"https://cve.report/CVE-2005-2154","api":"https://cve.report/api/cve/CVE-2005-2154.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-2154","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-2154"},"summary":{"title":"CVE-2005-2154","description":"PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-07-06 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://securitytracker.com/id?1014373","name":"http://securitytracker.com/id?1014373","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - osTicket Lets Remote Users Include Local Files and Inject SQL Commands","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://seclists.org/lists/bugtraq/2005/Jul/0009.html","name":"http://seclists.org/lists/bugtraq/2005/Jul/0009.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"Bugtraq: [SECURITY ALERT] osTicket bugs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/14127","name":"http://www.securityfocus.com/bid/14127","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"OSTicket Multiple Input Validation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-2154","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-2154","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"2154","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osticket","cpe5":"osticket_sts","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2154","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osticket","cpe5":"osticket_sts","cpe6":"1.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"2154","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"osticket","cpe5":"osticket_sts","cpe6":"1.3_beta","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:15:37.566Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1014373","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1014373"},{"name":"14127","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/14127"},{"name":"20050701 [SECURITY ALERT] osTicket bugs","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://seclists.org/lists/bugtraq/2005/Jul/0009.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-07-06T04:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1014373","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1014373"},{"name":"14127","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/14127"},{"name":"20050701 [SECURITY ALERT] osTicket bugs","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://seclists.org/lists/bugtraq/2005/Jul/0009.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-2154","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1014373","refsource":"SECTRACK","url":"http://securitytracker.com/id?1014373"},{"name":"14127","refsource":"BID","url":"http://www.securityfocus.com/bid/14127"},{"name":"20050701 [SECURITY ALERT] osTicket bugs","refsource":"BUGTRAQ","url":"http://seclists.org/lists/bugtraq/2005/Jul/0009.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-2154","datePublished":"2005-07-06T04:00:00.000Z","dateReserved":"2005-07-06T00:00:00.000Z","dateUpdated":"2024-09-16T22:40:05.245Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-07-06 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket_sts:1.2:*:*:*:*:*:*:*","matchCriteriaId":"00CBCE49-FA09-47BD-9584-486B32D58EFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket_sts:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E2D83869-36F9-4AD0-8B90-AF2ACF281735"},{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket_sts:1.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"528C4718-78C4-4C49-8759-1BB17E2A331F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"2154","Ordinal":"1","Title":"CVE-2005-2154","CVE":"CVE-2005-2154","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"2154","Ordinal":"1","NoteData":"PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter.","Type":"Description","Title":"CVE-2005-2154"},{"CveYear":"2005","CveId":"2154","Ordinal":"2","NoteData":"2005-07-06","Type":"Other","Title":"Published"}]}}}