Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bestpractical rt 3.6.6 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-3892
Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x prior to 3.6.9, 3.8.x prior to 3.8.5, and other 3.4.6 up to and including 3.8.4 versions allows remote malicious users to inject arbitrary web script or HTML via certain Custom Fields.
Bestpractical Rt 3.6.7Bestpractical Rt 3.6.2Bestpractical Rt 3.6.3Bestpractical Rt 3.8.2Bestpractical Rt 3.6.0Bestpractical Rt 3.8.0Bestpractical Rt 3.4.6Bestpractical Rt 3.6.6Bestpractical Rt 3.6.5Bestpractical Rt 3.6.8Bestpractical Rt 3.8.3Bestpractical Rt 3.6.1Bestpractical Rt 3.6.4Bestpractical Rt 3.8.1Bestpractical Rt 3.8.4
4.3
CVSSv2
CVE-2011-1690
Best Practical Solutions RT 3.6.0 up to and including 3.6.10 and 3.8.0 up to and including 3.8.8 allows remote malicious users to trick users into sending credentials to an arbitrary server via unspecified vectors.
Bestpractical Rt 3.6.9Bestpractical Rt 3.6.1Bestpractical Rt 3.6.7Bestpractical Rt 3.6.6Bestpractical Rt 3.6.10Bestpractical Rt 3.6.5Bestpractical Rt 3.6.4Bestpractical Rt 3.6.8Bestpractical Rt 3.6.0Bestpractical Rt 3.6.3Bestpractical Rt 3.6.2Bestpractical Rt 3.8.5Bestpractical Rt 3.8.7Bestpractical Rt 3.8.6Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.8.8Bestpractical Rt 3.8.4Bestpractical Rt 3.8.3Bestpractical Rt 3.8.2
6.8
CVSSv2
CVE-2011-4458
Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x prior to 3.8.12 and 4.x prior to 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CV...
Bestpractical Rt 3.6.1Bestpractical Rt 3.6.6Bestpractical Rt 3.6.4Bestpractical Rt 3.6.3Bestpractical Rt 3.6.2Bestpractical Rt 3.8.9Bestpractical Rt 3.8.4Bestpractical Rt 3.6.0Bestpractical Rt 3.6.8Bestpractical Rt 3.6.5Bestpractical Rt 3.7.86Bestpractical Rt 3.7.5Bestpractical Rt 3.8.1Bestpractical Rt 3.8.8Bestpractical Rt 3.8.0Bestpractical Rt 3.8.7Bestpractical Rt 3.8.6Bestpractical Rt 4.0.0Bestpractical Rt 4.0.1Bestpractical Rt 3.6.9Bestpractical Rt 3.6.10Bestpractical Rt 3.7.80
4.3
CVSSv2
CVE-2011-1688
Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allows remote malicious users to read arbitrary files via a crafted HTTP request.
Bestpractical Rt 3.2.0Bestpractical Rt 3.4.3Bestpractical Rt 3.4.4Bestpractical Rt 3.4.1Bestpractical Rt 3.4.2Bestpractical Rt 3.6.2Bestpractical Rt 3.6.3Bestpractical Rt 3.6.4Bestpractical Rt 3.6.5Bestpractical Rt 3.2.1Bestpractical Rt 3.2.2Bestpractical Rt 3.4.5Bestpractical Rt 3.4.6Bestpractical Rt 3.6.6Bestpractical Rt 3.6.7Bestpractical Rt 3.2.3Bestpractical Rt 3.4.0Bestpractical Rt 3.6.0Bestpractical Rt 3.6.1Bestpractical Rt 3.6.10Bestpractical Rt 3.6.8Bestpractical Rt 3.6.9
4
CVSSv2
CVE-2008-3502
Unspecified vulnerability in Best Practical Solutions RT 3.0.0 up to and including 3.6.6 allows remote authenticated users to cause a denial of service (CPU or memory consumption) via unspecified vectors related to the Devel::StackTrace module for Perl.
Bestpractical Rt 3.0.3Bestpractical Rt 3.0.4Bestpractical Rt 3.2.0Bestpractical Rt 3.2.1Bestpractical Rt 3.4.4Bestpractical Rt 3.4.5Bestpractical Rt 3.6.6Bestpractical Rt 3.0.11Bestpractical Rt 3.0.12Bestpractical Rt 3.0.2Bestpractical Rt 3.0.8Bestpractical Rt 3.0.9Bestpractical Rt 3.4.2Bestpractical Rt 3.4.3Bestpractical Rt 3.6.4Bestpractical Rt 3.6.5Bestpractical Rt 3.0.1Bestpractical Rt 3.0.10Bestpractical Rt 3.0.7Bestpractical Rt 3.0.7.1Bestpractical Rt 3.4.0Bestpractical Rt 3.4.1
5.8
CVSSv2
CVE-2009-4151
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 up to and including 3.6.9 and 3.8.x up to and including 3.8.5 allows remote malicious users to hijack web sessions by setting the session identifier via a manipulation that lev...
Bestpractical Rt 3.0.1Bestpractical Rt 3.0.6Bestpractical Rt 3.0.7Bestpractical Rt 3.2.2Bestpractical Rt 3.4.0Bestpractical Rt 3.6.0Bestpractical Rt 3.6.1Bestpractical Rt 3.8.4Bestpractical Rt 3.8.3Bestpractical Rt 3.0.10Bestpractical Rt 3.0.11Bestpractical Rt 3.0.7.1Bestpractical Rt 3.0.8Bestpractical Rt 3.4.1Bestpractical Rt 3.4.2Bestpractical Rt 3.6.2Bestpractical Rt 3.6.3Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.0.12Bestpractical Rt 3.0.2Bestpractical Rt 3.0.9
5.8
CVSSv2
CVE-2009-3585
Session fixation vulnerability in html/Elements/SetupSessionCookie in Best Practical Solutions RT 3.0.0 up to and including 3.6.9 and 3.8.x up to and including 3.8.5 allows remote malicious users to hijack web sessions by setting the session identifier via a manipulation that lev...
Bestpractical Rt 3.6.6Bestpractical Rt 3.6.7Bestpractical Rt 3.8.4Bestpractical Rt 3.8.5Bestpractical Rt 3.0.1Bestpractical Rt 3.0.10Bestpractical Rt 3.0.7Bestpractical Rt 3.0.7.1Bestpractical Rt 3.6.1Bestpractical Rt 3.6.2Bestpractical Rt 3.8.0Bestpractical Rt 3.8.1Bestpractical Rt 3.4.2Bestpractical Rt 3.4.3Bestpractical Rt 3.0.2Bestpractical Rt 3.0.3Bestpractical Rt 3.0.4Bestpractical Rt 3.2.0Bestpractical Rt 3.2.1Bestpractical Rt 3.6.3Bestpractical Rt 3.6.4Bestpractical Rt 3.6.5
4
CVSSv2
CVE-2011-1687
Best Practical Solutions RT 3.0.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwor...
Bestpractical Rt 3.6.2Bestpractical Rt 3.0.4Bestpractical Rt 3.0.3Bestpractical Rt 3.4.4Bestpractical Rt 3.4.3Bestpractical Rt 3.2.2Bestpractical Rt 3.6.5Bestpractical Rt 3.6.6Bestpractical Rt 3.6.0Bestpractical Rt 3.6.1Bestpractical Rt 3.0.7Bestpractical Rt 3.0.11Bestpractical Rt 3.0.10Bestpractical Rt 3.4.0Bestpractical Rt 3.0.9Bestpractical Rt 3.0.7.1Bestpractical Rt 3.6.9Bestpractical Rt 3.0.0Bestpractical Rt 3.0.5Bestpractical Rt 3.0.6Bestpractical Rt 3.4.5Bestpractical Rt 3.0.1
6.5
CVSSv2
CVE-2011-1686
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonst...
Bestpractical Rt 2.0.14Bestpractical Rt 2.0.13Bestpractical Rt 2.0.8.2Bestpractical Rt 2.0.9Bestpractical Rt 3.0.0Bestpractical Rt 3.6.0Bestpractical Rt 3.0.5Bestpractical Rt 3.0.6Bestpractical Rt 3.4.5Bestpractical Rt 2.0.12Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.11Bestpractical Rt 2.0.0Bestpractical Rt 2.0.1Bestpractical Rt 3.6.1Bestpractical Rt 3.4.6Bestpractical Rt 3.0.7Bestpractical Rt 3.0.11Bestpractical Rt 3.4.0Bestpractical Rt 3.4.1Bestpractical Rt 3.0.7.1Bestpractical Rt 3.2.0
4.3
CVSSv2
CVE-2011-1689
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 up to and including 3.6.10, 3.8.0 up to and including 3.8.9, and 4.0.0rc up to and including 4.0.0rc7 allow remote malicious users to inject arbitrary web script or HTML via unspecified vecto...
Bestpractical Rt 2.0.6Bestpractical Rt 2.0.7Bestpractical Rt 2.0.2Bestpractical Rt 2.0.3Bestpractical Rt 3.6.3Bestpractical Rt 3.6.2Bestpractical Rt 3.0.2Bestpractical Rt 3.0.3Bestpractical Rt 3.4.2Bestpractical Rt 3.4.3Bestpractical Rt 3.6.5Bestpractical Rt 3.6.7Bestpractical Rt 2.0.5.1Bestpractical Rt 2.0.5.3Bestpractical Rt 2.0.0Bestpractical Rt 2.0.1Bestpractical Rt 3.4.6Bestpractical Rt 3.6.4Bestpractical Rt 3.0.11Bestpractical Rt 3.0.12Bestpractical Rt 3.4.0Bestpractical Rt 3.4.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook