Back

CVE-2005-1438

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

Published: May 3, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
osticket osticket 1

GitHub Security Advisory GHSA-7j68-cwxq-c8xf

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.49%

Top 28% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub