Vulnerabilities in osTicket 1.0