Launchpad.net

CVE 2010-0438

Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Related bugs and status

CVE-2010-0438 (Candidate) is related to these bugs:

Bug #523473: CVE-2010-0438 Multiple SQL injection vulnerabilities

		In	Importance	Status
523473	CVE-2010-0438 Multiple SQL injection vulnerabilities	otrs2 (Ubuntu)	Undecided	Fix Released
523473	CVE-2010-0438 Multiple SQL injection vulnerabilities	otrs2 (Ubuntu Hardy)	Undecided	Won't Fix
523473	CVE-2010-0438 Multiple SQL injection vulnerabilities	otrs2 (Ubuntu Intrepid)	Undecided	Invalid
523473	CVE-2010-0438 Multiple SQL injection vulnerabilities	otrs2 (Ubuntu Karmic)	Undecided	Won't Fix
523473	CVE-2010-0438 Multiple SQL injection vulnerabilities	otrs2 (Ubuntu Jaunty)	Undecided	Won't Fix

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2010-0438

Related bugs and status

Related bugs

References