Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bestpractical rt 3.1.13 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2011-0009
Best Practical Solutions RT 3.x prior to 3.8.9rc2 and 4.x prior to 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent malicious users to determine cleartext passwords via a brute-force attack on the database.
Bestpractical Rt 3.5.5Bestpractical Rt 3.0.4Bestpractical Rt 3.2.1Bestpractical Rt 3.6.0Bestpractical Rt 3.4.0Bestpractical Rt 3.0.8Bestpractical Rt 3.4.2Bestpractical Rt 3.6.4Bestpractical Rt 3.8.8Bestpractical Rt 3.2.0Bestpractical Rt 3.1.2Bestpractical Rt 3.6.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.2Bestpractical Rt 3.5.4Bestpractical Rt 3.6.7Bestpractical Rt 3.0.10Bestpractical Rt 3.6.2Bestpractical Rt 3.2.2Bestpractical Rt 3.6.3Bestpractical Rt 3.1.6Bestpractical Rt 3.0.11
3.5
CVSSv2
CVE-2011-4459
Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
Bestpractical Rt 3.6.1Bestpractical Rt 3.6.2Bestpractical Rt 3.6.0Bestpractical Rt 3.4.0Bestpractical Rt 3.2.2Bestpractical Rt 3.2.0Bestpractical Rt 3.4.6Bestpractical Rt 3.4.3Bestpractical Rt 3.0.10Bestpractical Rt 3.1.2Bestpractical Rt 3.1.7Bestpractical Rt 3.1.17Bestpractical Rt 3.1.12Bestpractical Rt 3.0.4Bestpractical Rt 3.4.4Bestpractical Rt 3.4.5Bestpractical Rt 3.2.1Bestpractical Rt 3.7.85Bestpractical Rt 3.6.8Bestpractical Rt 3.7.86Bestpractical Rt 3.6.6Bestpractical Rt 3.6.4
5
CVSSv2
CVE-2011-2082
The vulnerable-passwords script in Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent malicious users to determine cleartext passwords, and poss...
Bestpractical Rt 3.6.0Bestpractical Rt 3.5.3Bestpractical Rt 3.5.4Bestpractical Rt 3.4.6Bestpractical Rt 3.4.0Bestpractical Rt 3.2.1Bestpractical Rt 3.2.0Bestpractical Rt 3.4.5Bestpractical Rt 3.4.4Bestpractical Rt 3.0.11Bestpractical Rt 3.1.4Bestpractical Rt 3.1.3Bestpractical Rt 3.1.6Bestpractical Rt 3.1.16Bestpractical Rt 3.1.13Bestpractical Rt 3.0.7Bestpractical Rt 3.0.10Bestpractical Rt 3.4.1Bestpractical Rt 3.0.7.1Bestpractical Rt 3.7.80Bestpractical Rt 3.6.6Bestpractical Rt 3.6.4
4.3
CVSSv2
CVE-2011-2083
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Bestpractical Rt 3.6.2Bestpractical Rt 3.6.0Bestpractical Rt 3.4.0Bestpractical Rt 3.2.2Bestpractical Rt 3.2.3Bestpractical Rt 3.2.0Bestpractical Rt 3.4.6Bestpractical Rt 3.4.5Bestpractical Rt 3.4.3Bestpractical Rt 3.4.2Bestpractical Rt 3.1.2Bestpractical Rt 3.1.10Bestpractical Rt 3.1.17Bestpractical Rt 3.0.10Bestpractical Rt 3.0.4Bestpractical Rt 3.0.5Bestpractical Rt 3.0.6Bestpractical Rt 3.0.1Bestpractical Rt 3.2.1Bestpractical Rt 3.7.86Bestpractical Rt 3.7.5Bestpractical Rt 3.6.4
4
CVSSv2
CVE-2011-2084
Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.
Bestpractical Rt 3.6.1Bestpractical Rt 3.5.7Bestpractical Rt 3.5.6Bestpractical Rt 3.6.0Bestpractical Rt 3.6.2Bestpractical Rt 3.2.2Bestpractical Rt 3.2.3Bestpractical Rt 3.2.0Bestpractical Rt 3.5.4Bestpractical Rt 3.5.5Bestpractical Rt 3.4.6Bestpractical Rt 3.4.0Bestpractical Rt 3.2.1Bestpractical Rt 3.6.10Bestpractical Rt 3.5.2Bestpractical Rt 3.4.5Bestpractical Rt 3.4.4Bestpractical Rt 3.0.11Bestpractical Rt 3.1.3Bestpractical Rt 3.1.6Bestpractical Rt 3.1.16Bestpractical Rt 3.1.13
7.5
CVSSv2
CVE-2011-5092
Best Practical Solutions RT 3.8.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote malicious users to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093.
Bestpractical Rt 3.6.2Bestpractical Rt 3.6.0Bestpractical Rt 3.5.3Bestpractical Rt 3.5.5Bestpractical Rt 3.4.0Bestpractical Rt 3.4.6Bestpractical Rt 3.2.1Bestpractical Rt 3.2.0Bestpractical Rt 3.5.2Bestpractical Rt 3.4.5Bestpractical Rt 3.4.4Bestpractical Rt 3.4.2Bestpractical Rt 3.0.11Bestpractical Rt 3.1.4Bestpractical Rt 3.1.6Bestpractical Rt 3.0.10Bestpractical Rt 3.1.16Bestpractical Rt 3.1.14Bestpractical Rt 3.0.6Bestpractical Rt 3.4.1Bestpractical Rt 3.2.3Bestpractical Rt 3.0.7.1
6.5
CVSSv2
CVE-2011-4460
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.5.3Bestpractical Rt 2.0.1Bestpractical Rt 2.0.2Bestpractical Rt 3.6.2Bestpractical Rt 3.6.0Bestpractical Rt 3.5.3Bestpractical Rt 3.4.0Bestpractical Rt 3.4.6Bestpractical Rt 3.2.1Bestpractical Rt 3.2.0Bestpractical Rt 3.4.5Bestpractical Rt 3.4.2Bestpractical Rt 3.1.4Bestpractical Rt 3.1.3Bestpractical Rt 3.1.15Bestpractical Rt 3.1.16Bestpractical Rt 3.0.6Bestpractical Rt 3.0.7Bestpractical Rt 3.0.10Bestpractical Rt 3.0.9Bestpractical Rt 3.0.7.1
6.8
CVSSv2
CVE-2011-2085
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT prior to 3.8.12 and 4.x prior to 4.0.6 allow remote malicious users to hijack the authentication of arbitrary users.
Bestpractical Rt 3.8.7Bestpractical Rt 3.5.5Bestpractical Rt 3.0.4Bestpractical Rt 3.2.1Bestpractical Rt 2.0.7Bestpractical Rt 3.6.0Bestpractical Rt 3.8.9Bestpractical Rt 3.4.0Bestpractical Rt 3.0.8Bestpractical Rt 3.4.2Bestpractical Rt 3.6.4Bestpractical Rt 3.8.8Bestpractical Rt 3.2.0Bestpractical Rt 3.1.2Bestpractical Rt 3.6.6Bestpractical Rt 2.0.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.2Bestpractical Rt 2.0.14Bestpractical Rt 3.5.4Bestpractical Rt 3.6.7Bestpractical Rt 3.0.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook