Vulnerabilities in osTicket 1.2.7