CVE Kennung:	CVE-2014-1695
Beschreibung:	Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) 3.1.x before 3.1.20, 3.2.x before 3.2.15, and 3.3.x before 3.3.5 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML email.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.804243   1.3.6.1.4.1.25623.1.0.891119
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2014-1695 BugTraq ID: 65844 http://www.securityfocus.com/bid/65844 https://www.exploit-db.com/exploits/36842/ http://adamziaja.com/poc/201401-xss-otrs.html http://packetstormsecurity.com/files/131654/OTRS-3.x-Cross-Site-Scripting.html http://www.osvdb.org/103781 http://secunia.com/advisories/57018 SuSE Security Announcement: openSUSE-SU-2014:0360 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00030.html