Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bestpractical rt 2.0.8.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-1689
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allow remote malicious users to inject arbitrary web script or HTML via unspecified vecto...
Bestpractical Rt 2.0.6Bestpractical Rt 2.0.7Bestpractical Rt 2.0.2Bestpractical Rt 2.0.3Bestpractical Rt 3.6.3Bestpractical Rt 3.6.2Bestpractical Rt 3.0.2Bestpractical Rt 3.0.3Bestpractical Rt 3.4.2Bestpractical Rt 3.4.3Bestpractical Rt 3.6.5Bestpractical Rt 3.6.7Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.5.3Bestpractical Rt 2.0.0Bestpractical Rt 2.0.1Bestpractical Rt 3.4.6Bestpractical Rt 3.6.4Bestpractical Rt 3.0.11Bestpractical Rt 3.0.12Bestpractical Rt 3.4.0Bestpractical Rt 3.4.1
6.5
CVSSv2
CVE-2011-1686
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonst...
Bestpractical Rt 2.0.14Bestpractical Rt 2.0.13Bestpractical Rt 2.0.8.2Bestpractical Rt 2.0.9Bestpractical Rt 3.0.0Bestpractical Rt 3.6.0Bestpractical Rt 3.0.5Bestpractical Rt 3.0.6Bestpractical Rt 3.4.5Bestpractical Rt 2.0.12Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.11Bestpractical Rt 2.0.0Bestpractical Rt 2.0.1Bestpractical Rt 3.6.1Bestpractical Rt 3.4.6Bestpractical Rt 3.0.7Bestpractical Rt 3.0.11Bestpractical Rt 3.4.0Bestpractical Rt 3.4.1Bestpractical Rt 3.0.7.1Bestpractical Rt 3.2.0
4
CVSSv2
CVE-2011-1008
Scrips_Overlay.pm in Best Practical Solutions RT prior to 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field...
Bestpractical RtBestpractical Rt 3.0.4Bestpractical Rt 2.0.7Bestpractical Rt 3.8.9Bestpractical Rt 3.0.8Bestpractical Rt 3.8.8Bestpractical Rt 2.0.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.2Bestpractical Rt 2.0.14Bestpractical Rt 3.6.7Bestpractical Rt 3.6.2Bestpractical Rt 3.2.2Bestpractical Rt 3.6.3Bestpractical Rt 3.0.11Bestpractical Rt 3.8.2Bestpractical Rt 2.0.15Bestpractical Rt 3.6.0Bestpractical Rt 2.0.5.3Bestpractical Rt 1.0.7Bestpractical Rt 1.0.1Bestpractical Rt 3.8.0
2.1
CVSSv2
CVE-2011-1007
Best Practical Solutions RT prior to 3.8.9 does not perform certain redirect actions upon a login, which allows physically proximate malicious users to obtain credentials by resubmitting the login form via the back button of a web browser on an unattended workstation after an RT ...
Bestpractical RtBestpractical Rt 3.0.4Bestpractical Rt 2.0.7Bestpractical Rt 3.8.9Bestpractical Rt 3.0.8Bestpractical Rt 3.8.8Bestpractical Rt 2.0.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.2Bestpractical Rt 2.0.14Bestpractical Rt 3.6.7Bestpractical Rt 3.6.2Bestpractical Rt 3.2.2Bestpractical Rt 3.6.3Bestpractical Rt 3.0.11Bestpractical Rt 3.8.2Bestpractical Rt 2.0.15Bestpractical Rt 3.6.0Bestpractical Rt 2.0.5.3Bestpractical Rt 1.0.7Bestpractical Rt 1.0.1Bestpractical Rt 3.8.0
6.5
CVSSv2
CVE-2011-4460
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.5.3Bestpractical Rt 2.0.1Bestpractical Rt 2.0.2Bestpractical Rt 3.6.2Bestpractical Rt 3.6.0Bestpractical Rt 3.5.3Bestpractical Rt 3.4.0Bestpractical Rt 3.4.6Bestpractical Rt 3.2.1Bestpractical Rt 3.2.0Bestpractical Rt 3.4.5Bestpractical Rt 3.4.2Bestpractical Rt 3.1.4Bestpractical Rt 3.1.3Bestpractical Rt 3.1.15Bestpractical Rt 3.1.16Bestpractical Rt 3.0.6Bestpractical Rt 3.0.7Bestpractical Rt 3.0.10Bestpractical Rt 3.0.9Bestpractical Rt 3.0.7.1
6.8
CVSSv2
CVE-2011-2085
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT prior to 3.8.12 and 4.x prior to 4.0.6 allow remote malicious users to hijack the authentication of arbitrary users.
Bestpractical Rt 3.8.7Bestpractical Rt 3.5.5Bestpractical Rt 3.0.4Bestpractical Rt 3.2.1Bestpractical Rt 2.0.7Bestpractical Rt 3.6.0Bestpractical Rt 3.8.9Bestpractical Rt 3.4.0Bestpractical Rt 3.0.8Bestpractical Rt 3.4.2Bestpractical Rt 3.6.4Bestpractical Rt 3.8.8Bestpractical Rt 3.2.0Bestpractical Rt 3.1.2Bestpractical Rt 3.6.6Bestpractical Rt 2.0.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.2Bestpractical Rt 2.0.14Bestpractical Rt 3.5.4Bestpractical Rt 3.6.7Bestpractical Rt 3.0.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook