Security Advisory
CVE-2004-0614
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.