Vulnerabilities in osTicket 1.6.0