Vulnerabilities in osTicket 1.12