Vulnerabilities in osTicket