sitracker support incident tracker 3.50 vulnerabilities and exploits

(subscribe to this query)

Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.

Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.64 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.65

1 EDB exploit

translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to obtain sensitive information via a direct request using the save action, which reveals the installation path.

Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.64 Sitracker Support Incident Tracker 3.65 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.60

1 EDB exploit

Support Incident Tracker prior to 3.51, when using LDAP authentication with anonymous binds, allows remote malicious users to bypass authentication via an empty password.

Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.40 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.21 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.45

Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) prior to 3.65 allow remote malicious users to inject arbitrary web script or HTML via the (1) mode parameter to contact_support.php; (2) contractid parameter to contract_add_service.php; (3...

Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.40 Sitracker Support Incident Tracker Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.21

1 EDB exploit

Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) prior to 3.65 allow remote malicious users to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary s...

Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.21 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.40

1 EDB exploit

Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) prior to 3.64 allow remote malicious users to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable...

Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.21 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.40 Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker

4 EDB exploits

Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) prior to 3.65 allow remote malicious users to execute arbitrary SQL commands via the (1) start parameter to portal/kb.php; (2) contractid parameter to contract_add_service.php; (3) id parameter to edit_...

Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.40 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.21 Sitracker Support Incident Tracker

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.

Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 10.8.00 Sitracker Support Incident Tracker 9.8.00 Sitracker Support Incident Tracker 14.8.00 Sitracker Support Incident Tracker 21.8.00 Sitracker Support Incident Tracker 3.01 Sitracker Support Incident Tracker 3.03 Sitracker Support Incident Tracker 7.8.00 Sitracker Support Incident Tracker 2.8.00 Sitracker Support Incident Tracker 11.8.00 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.03a Sitracker Support Incident Tracker Sitracker Support Incident Tracker 16.8.00 Sitracker Support Incident Tracker 3.00 Sitracker Support Incident Tracker 3.02 Sitracker Support Incident Tracker 4.8.00 Sitracker Support Incident Tracker 1.8.00

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook