sitracker support incident tracker 3.65 vulnerabilities and exploits

(subscribe to this query)

NA

Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable.

Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.64 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.65

1 EDB exploit

NA

translate.php in Support Incident Tracker (aka SiT!) 3.45 up to and including 3.65 allows remote malicious users to obtain sensitive information via a direct request using the save action, which reveals the installation path.

Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.64 Sitracker Support Incident Tracker 3.65 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.60

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.

Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 10.8.00 Sitracker Support Incident Tracker 9.8.00 Sitracker Support Incident Tracker 14.8.00 Sitracker Support Incident Tracker 21.8.00 Sitracker Support Incident Tracker 3.01 Sitracker Support Incident Tracker 3.03 Sitracker Support Incident Tracker 7.8.00 Sitracker Support Incident Tracker 2.8.00 Sitracker Support Incident Tracker 11.8.00 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.03a Sitracker Support Incident Tracker Sitracker Support Incident Tracker 16.8.00 Sitracker Support Incident Tracker 3.00 Sitracker Support Incident Tracker 3.02 Sitracker Support Incident Tracker 4.8.00 Sitracker Support Incident Tracker 1.8.00

NA

Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) prior to 3.65 allow remote malicious users to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary s...

Sitracker Support Incident Tracker 3.35 Sitracker Support Incident Tracker 3.33 Sitracker Support Incident Tracker 3.32 Sitracker Support Incident Tracker 3.31 Sitracker Support Incident Tracker 3.60 Sitracker Support Incident Tracker 3.6 Sitracker Support Incident Tracker 3.51 Sitracker Support Incident Tracker 3.50 Sitracker Support Incident Tracker 3.22pl1 Sitracker Support Incident Tracker 3.22 Sitracker Support Incident Tracker 3.21 Sitracker Support Incident Tracker 3.63 Sitracker Support Incident Tracker Sitracker Support Incident Tracker 3.62 Sitracker Support Incident Tracker 3.41 Sitracker Support Incident Tracker 3.36 Sitracker Support Incident Tracker 3.30 Sitracker Support Incident Tracker 3.24 Sitracker Support Incident Tracker 3.23 Sitracker Support Incident Tracker 3.45 Sitracker Support Incident Tracker 3.61 Sitracker Support Incident Tracker 3.40

1 EDB exploit

NA

ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.

Sitracker Support Incident Tracker 3.65

1 EDB exploit

NA

Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote malicious users to inject arbitrary web script or HTML via the search_string parameter.

Sitracker Support Incident Tracker 3.65

NA

SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote malicious users to execute arbitrary SQL commands via an uploaded file with a crafted file name.

Sitracker Support Incident Tracker 3.65

NA

Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote malicious users to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.

Sitracker Support Incident Tracker 3.65

NA

Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in unspe...

Sitracker Support Incident Tracker 3.65

NA

move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.

Sitracker Support Incident Tracker 3.65

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook