Vulnerabilities in osTicket 1.9.0