LXer: Mandriva: 2013:212: otrs
 

Published at LXer:

Updated otrs package fixes security vulnerability: It was discovered that otrs2, the Open Ticket Request System, does not properly sanitise user-supplied data that is used on SQL queries. An attacker with a valid agent login could exploit this issue.

Read More...