Vulnerabilities in osTicket 1.8.6