Vulnerabilities in osTicket 1.6