OTRS Open Ticket WebServer SQL Injection

--- SQL Injection Method Get --- OTRS Version.... >

Location of Vul: public.pl?Action=PublicFAQZoom;ItemID=
basic dork:  inurl:public.pl?Action=PublicFAQZoom;ItemID=  OTRS
Company:http://otrs.org/


Fail:Kernel/Modules/PublicFAQZoomItemID1005.pm


examples....

http://support.shambhala.org/otrs/public.pl?Action=PublicFAQZoom;ItemID=1
http://sagt.cnti.gob.ve/otrs/public.pl?Action=PublicFAQZoom;ItemID=1005
https://webs.comarb.gob.ar/suma/public.pl?Action=PublicFAQZoom%3BItemID=49
http://otrs.copao.es/otrs/public.pl?Action=PublicFAQZoom;ItemID=24
http://sun.softconf.com/otrs/public.pl?Action=PublicFAQ&Subaction=Print&CategoryID=4&ItemID=263``