CVE-2019-11537

In osTicket before 1.12, XSS exists via /upload/file.php, /upload/scp/users.php?do=import-users, and /upload/scp/ajax.php/users/import if an agent manager user uploads a crafted .csv file to the User Importer, because file contents can appear in an error message. The XSS can lead to local file inclusion.

• CWE-79

• https://github.com/osTicket/osTicket/pull/4869Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12Third Party Advisory
• https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46753Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46753/Exploit, Third Party Advisory, VDB Entry
• https://github.com/osTicket/osTicket/pull/4869Third Party Advisory
• https://github.com/osTicket/osTicket/releases/tag/v1.12Third Party Advisory
• https://pentest.com.tr/exploits/osTicket-v1-11-XSS-to-LFI.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46753Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46753/Exploit, Third Party Advisory, VDB Entry

Published

Apr 25, 2019

Last Modified

Jul 10, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11527An issue was discovered in Softing uaGate SI 1.60.01. A CGI …8.8
• CVE-2019-11528An issue was discovered in Softing uaGate SI 1.60.01. A syst…7.5
• CVE-2019-1153An information disclosure vulnerability exists when the Micr…5.5
• CVE-2019-11533Cross-site scripting (XSS) vulnerability in ProjectSend befo…
• CVE-2019-11535Unsanitized user input in the web interface for Linksys WiFi…
• CVE-2019-11536Kalki Kalkitech SYNC3000 Substation DCU GPC v2.22.6, 2.23.0,…
• CVE-2019-11538In Pulse Secure Pulse Connect Secure version 9.0RX before 9.…7.7
• CVE-2019-11539In Pulse Secure Pulse Connect Secure version 9.0RX before 9.…7.2
• CVE-2019-1154An information disclosure vulnerability exists when the Wind…5.5
• CVE-2019-11540In Pulse Secure Pulse Connect Secure version 9.0RX before 9.…9.8
• CVE-2019-11541In Pulse Secure Pulse Connect Secure version 9.0RX before 9.…7.5
• CVE-2019-11542In Pulse Secure Pulse Connect Secure version 9.0RX before 9.…7.2