CVE-2005-3895

Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3, when AttachmentDownloadType is set to inline, renders text/html e-mail attachments as HTML in the browser when the queue moderator attempts to download the attachment, which allows remote attackers to execute arbitrary web script or HTML. NOTE: this particular issue is referred to as XSS by some sources.

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html
• http://marc.info/?l=bugtraq&m=113272360804853&w=2
• http://moritz-naumann.com/adv/0007/otrsmulti/0007.txtPatch, Vendor Advisory
• http://otrs.org/advisory/OSA-2005-01-en/Patch, Vendor Advisory
• http://secunia.com/advisories/17685/Patch, Vendor Advisory
• http://secunia.com/advisories/18101Vendor Advisory
• http://secunia.com/advisories/18887Vendor Advisory
• http://securityreason.com/securityalert/200
• http://www.debian.org/security/2006/dsa-973
• http://www.novell.com/linux/security/advisories/2005_30_sr.html
• http://www.osvdb.org/21066
• http://www.securityfocus.com/bid/15537/Patch
• http://www.vupen.com/english/advisories/2005/2535
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23355
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/039001.html
• http://marc.info/?l=bugtraq&m=113272360804853&w=2
• http://moritz-naumann.com/adv/0007/otrsmulti/0007.txtPatch, Vendor Advisory
• http://otrs.org/advisory/OSA-2005-01-en/Patch, Vendor Advisory
• http://secunia.com/advisories/17685/Patch, Vendor Advisory
• http://secunia.com/advisories/18101Vendor Advisory
• http://secunia.com/advisories/18887Vendor Advisory
• http://securityreason.com/securityalert/200
• http://www.debian.org/security/2006/dsa-973
• http://www.novell.com/linux/security/advisories/2005_30_sr.html
• http://www.osvdb.org/21066
• http://www.securityfocus.com/bid/15537/Patch
• http://www.vupen.com/english/advisories/2005/2535
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23355

Published

Nov 29, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3889Gadu-Gadu 7.20 allows remote attackers to cause a denial of …
• CVE-2005-3890Gadu-Gadu 7.20 allows remote attackers to cause a denial of …
• CVE-2005-3891Stack-based buffer overflow in Gadu-Gadu 7.20 allows remote …
• CVE-2005-3892Gadu-Gadu 7.20 allows remote attackers to eavesdrop on a use…
• CVE-2005-3893Multiple SQL injection vulnerabilities in index.pl in Open T…
• CVE-2005-3894Multiple cross-site scripting (XSS) vulnerabilities in index…
• CVE-2005-3896Mozilla allows remote attackers to cause a denial of service…
• CVE-2005-3897Apple Safari 2.0.2 allows remote attackers to cause a denial…
• CVE-2005-3898Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2005-3899The automatic update feature in Google Talk allows remote at…
• CVE-2005-3900Macromedia Breeze Communication Server and Breeze Live Serve…
• CVE-2005-3901Macromedia Flash Communication Server MX 1.0 and 1.5 does no…