Mandriva: 2013:212: otrs

LinuxSecurity.com: Updated otrs package fixes security vulnerability:
It was discovered that otrs2, the Open Ticket Request System, does not
properly sanitise user-supplied data that is used on SQL queries. An
attacker with a valid agent login could exploit this issue to craft
[More...]