CVE-2005-3893: otrs

EPSS trend

Probability

7.17%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.17% on 21-09-2026

21-09-202621-10-2026

EPSS score

7.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (moritz-naumann.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasecgiVerified
OTRS 2.0 - AgentTicketPlain Action Multiple SQL Injections
Maturity: poc

Show all 4 exploits

exploit-databasecgiVerified
OTRS 2.0 - Login Function 'User' SQL Injection
Maturity: poc

References

16 links

www.osvdb.org/21065VDB EntryX Refsource OSVDB
secunia.com/advisories/18887Third Party AdvisoryX Refsource SECUNIA
lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.htmlMailing ListX Refsource FULLDISC
moritz-naumann.com/adv/0007/otrsmulti/0007.txtX Refsource MISCExploitPatchVendor Advisory
otrs.org/advisory/OSA-2005-01-en/X Refsource CONFIRMPatchVendor Advisory
marc.info?l=bugtraq&m=113272360804853&w=2Mailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2005/2535VDB EntryX Refsource VUPEN
www.debian.org/security/2006/dsa-973Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18101Third Party AdvisoryX Refsource SECUNIA
www.osvdb.org/21064VDB EntryX Refsource OSVDB

Show all 16 references

exchange.xforce.ibmcloud.com/vulnerabilities/23352VDB EntryX Refsource XF
www.novell.com/linux/security/advisories/2005_30_sr.htmlVendor AdvisoryX Refsource SUSE
exchange.xforce.ibmcloud.com/vulnerabilities/23354VDB EntryX Refsource XF
securitytracker.com/id?1015262VDB EntryX Refsource SECTRACK
secunia.com/advisories/17685/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/bid/15537/VDB EntryX Refsource BIDExploitPatch

Related vulnerabilities

CVE-2018-11563debianotrs2+30.82%7y ago08-07-2019 12:23An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.CVE-2018-20800debianotrs2+20.99%7y ago13-03-2019 22:00An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. Users updating to 6.0.13 (also patchlevel updates) or 5.0.31 (only major updates) will experience data loss in their agent preferences table.CVE-2018-17883debianotrs2+20.44%3y ago15-04-2023 00:00An issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker could send an e-mail message with a malicious link to an OTRS system or an agent. If a logged-in agent opens this link, it could cause the execution of JavaScript in the context of OTRS.CVE-2018-7567debianotrs2+25.20%8y ago04-03-2018 20:00In the Admin Package Manager in Open Ticket Request System (OTRS) 5.0.0 through 5.0.24 and 6.0.0 through 6.0.1, authenticated admins are able to exploit a Blind Remote Code Execution vulnerability by loading a crafted opm file with an embedded CodeInstall element to execute a command on the server during package installation. NOTE: the vendor disputes this issue stating "the behaviour is as designed and needed for different packages to be installed", "there is a security warning if the package is not verified by OTRS Group", and "there is the possibility and responsibility of an admin to check packages before installation which is possible as they are not binary.CVE-2018-10198debianotrs2+20.95%8y ago06-06-2018 20:00An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets.CVE-2013-4718otrsotrs+10.67%5y ago09-08-2021 18:03Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrary web script or HTML via an ITSM ConfigItem search.

All vulnerabilities inotrs

CVE-2005-3893: otrs

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References