Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bestpractical request tracker 4.0.3 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2013-5587
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x prior to 4.0.13, when MakeClicky is configured, allows remote malicious users to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different aff...
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.5
Bestpractical Rt 4.0.6
Bestpractical Rt 4.0.7
Bestpractical Rt 4.0.9
Bestpractical Rt 4.0.1
Bestpractical Rt 4.0.3
Bestpractical Rt 4.0.8
Bestpractical Rt 4.0.12
Bestpractical Rt 4.0.11
Bestpractical Rt 4.0.10
Bestpractical Rt 4.0.2
Bestpractical Rt 4.0.4
NA
CVE-2013-3370
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 does not properly restrict access to private callback components, which allows remote malicious users to have an unspecified impact via a direct request.
Bestpractical Rt 4.0.9
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.3
Bestpractical Rt 4.0.8
Bestpractical Rt 4.0.12
Bestpractical Rt 4.0.11
Bestpractical Rt 4.0.1
Bestpractical Rt 4.0.2
Bestpractical Rt 4.0.5
Bestpractical Rt 4.0.6
Bestpractical Rt 4.0.7
Bestpractical Rt 4.0.10
Bestpractical Rt 4.0.4
Bestpractical Rt 3.8.0
Bestpractical Rt 3.8.1
Bestpractical Rt 3.8.10
Bestpractical Rt 3.8.13
Bestpractical Rt 3.8.14
Bestpractical Rt 3.8.3
Bestpractical Rt 3.8.4
Bestpractical Rt 3.8.7
Bestpractical Rt 3.8.8
NA
CVE-2011-2083
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Bestpractical Rt 3.6.2
Bestpractical Rt 3.6.0
Bestpractical Rt 3.4.0
Bestpractical Rt 3.2.2
Bestpractical Rt 3.2.3
Bestpractical Rt 3.2.0
Bestpractical Rt 3.4.6
Bestpractical Rt 3.4.5
Bestpractical Rt 3.4.3
Bestpractical Rt 3.4.2
Bestpractical Rt 3.1.2
Bestpractical Rt 3.1.10
Bestpractical Rt 3.1.17
Bestpractical Rt 3.0.10
Bestpractical Rt 3.0.4
Bestpractical Rt 3.0.5
Bestpractical Rt 3.0.6
Bestpractical Rt 3.0.1
Bestpractical Rt 3.2.1
Bestpractical Rt 3.7.86
Bestpractical Rt 3.7.5
Bestpractical Rt 3.6.4
NA
CVE-2011-2084
Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote authenticated users to read (1) hashes of former passwords and (2) ticket correspondence history by leveraging access to a privileged account.
Bestpractical Rt 3.6.1
Bestpractical Rt 3.5.7
Bestpractical Rt 3.5.6
Bestpractical Rt 3.6.0
Bestpractical Rt 3.6.2
Bestpractical Rt 3.2.2
Bestpractical Rt 3.2.3
Bestpractical Rt 3.2.0
Bestpractical Rt 3.5.4
Bestpractical Rt 3.5.5
Bestpractical Rt 3.4.6
Bestpractical Rt 3.4.0
Bestpractical Rt 3.2.1
Bestpractical Rt 3.6.10
Bestpractical Rt 3.5.2
Bestpractical Rt 3.4.5
Bestpractical Rt 3.4.4
Bestpractical Rt 3.0.11
Bestpractical Rt 3.1.3
Bestpractical Rt 3.1.6
Bestpractical Rt 3.1.16
Bestpractical Rt 3.1.13
NA
CVE-2011-4459
Best Practical Solutions RT 3.x prior to 3.8.12 and 4.x prior to 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership.
Bestpractical Rt 3.6.1
Bestpractical Rt 3.6.2
Bestpractical Rt 3.6.0
Bestpractical Rt 3.4.0
Bestpractical Rt 3.2.2
Bestpractical Rt 3.2.0
Bestpractical Rt 3.4.6
Bestpractical Rt 3.4.3
Bestpractical Rt 3.0.10
Bestpractical Rt 3.1.2
Bestpractical Rt 3.1.7
Bestpractical Rt 3.1.17
Bestpractical Rt 3.1.12
Bestpractical Rt 3.0.4
Bestpractical Rt 3.4.4
Bestpractical Rt 3.4.5
Bestpractical Rt 3.2.1
Bestpractical Rt 3.7.85
Bestpractical Rt 3.6.8
Bestpractical Rt 3.7.86
Bestpractical Rt 3.6.6
Bestpractical Rt 3.6.4
NA
CVE-2013-3369
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors.
Bestpractical Rt 3.8.0
Bestpractical Rt 3.8.1
Bestpractical Rt 3.8.13
Bestpractical Rt 3.8.14
Bestpractical Rt 3.8.7
Bestpractical Rt 3.8.8
Bestpractical Rt 3.8.16
Bestpractical Rt 3.8.11
Bestpractical Rt 3.8.12
Bestpractical Rt 3.8.2
Bestpractical Rt 3.8.6
Bestpractical Rt 3.8.9
Bestpractical Rt 3.8.10
Bestpractical Rt 3.8.3
Bestpractical Rt 3.8.4
Bestpractical Rt 3.8.15
Bestpractical Rt 3.8.5
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.5
Bestpractical Rt 4.0.6
Bestpractical Rt 4.0.7
Bestpractical Rt 4.0.9
NA
CVE-2011-4460
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x prior to 3.8.12 and 4.x prior to 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Bestpractical Rt 2.0.5.1
Bestpractical Rt 2.0.5.3
Bestpractical Rt 2.0.1
Bestpractical Rt 2.0.2
Bestpractical Rt 3.6.2
Bestpractical Rt 3.6.0
Bestpractical Rt 3.5.3
Bestpractical Rt 3.4.0
Bestpractical Rt 3.4.6
Bestpractical Rt 3.2.1
Bestpractical Rt 3.2.0
Bestpractical Rt 3.4.5
Bestpractical Rt 3.4.2
Bestpractical Rt 3.1.4
Bestpractical Rt 3.1.3
Bestpractical Rt 3.1.15
Bestpractical Rt 3.1.16
Bestpractical Rt 3.0.6
Bestpractical Rt 3.0.7
Bestpractical Rt 3.0.10
Bestpractical Rt 3.0.9
Bestpractical Rt 3.0.7.1
NA
CVE-2013-3372
Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows remote malicious users to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.
Bestpractical Rt 4.0.10
Bestpractical Rt 4.0.9
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.2
Bestpractical Rt 4.0.3
Bestpractical Rt 4.0.4
Bestpractical Rt 4.0.12
Bestpractical Rt 4.0.1
Bestpractical Rt 4.0.5
Bestpractical Rt 4.0.6
Bestpractical Rt 4.0.7
Bestpractical Rt 4.0.8
Bestpractical Rt 4.0.11
Bestpractical Rt 3.8.0
Bestpractical Rt 3.8.1
Bestpractical Rt 3.8.13
Bestpractical Rt 3.8.14
Bestpractical Rt 3.8.7
Bestpractical Rt 3.8.8
Bestpractical Rt 3.8.16
Bestpractical Rt 3.8.11
Bestpractical Rt 3.8.12
NA
CVE-2013-3371
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 up to and including 3.8.16 and 4.0.x prior to 4.0.13 allows remote malicious users to inject arbitrary web script or HTML via the filename of an attachment.
Bestpractical Rt 3.8.0
Bestpractical Rt 3.8.1
Bestpractical Rt 3.8.11
Bestpractical Rt 3.8.15
Bestpractical Rt 3.8.2
Bestpractical Rt 3.8.4
Bestpractical Rt 3.8.5
Bestpractical Rt 3.8.6
Bestpractical Rt 3.8.8
Bestpractical Rt 3.8.9
Bestpractical Rt 3.8.13
Bestpractical Rt 3.8.10
Bestpractical Rt 3.8.3
Bestpractical Rt 3.8.14
Bestpractical Rt 3.8.7
Bestpractical Rt 3.8.16
Bestpractical Rt 3.8.12
Bestpractical Rt 4.0.10
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.1
Bestpractical Rt 4.0.2
Bestpractical Rt 4.0.3
NA
CVE-2013-3368
bin/rt in Request Tracker (RT) 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with predictable name.
Bestpractical Rt 4.0.12
Bestpractical Rt 4.0.0
Bestpractical Rt 4.0.1
Bestpractical Rt 4.0.2
Bestpractical Rt 4.0.5
Bestpractical Rt 4.0.6
Bestpractical Rt 4.0.7
Bestpractical Rt 4.0.8
Bestpractical Rt 4.0.11
Bestpractical Rt 4.0.10
Bestpractical Rt 4.0.9
Bestpractical Rt 4.0.3
Bestpractical Rt 4.0.4
Bestpractical Rt 3.8.16
Bestpractical Rt 3.8.0
Bestpractical Rt 3.8.1
Bestpractical Rt 3.8.11
Bestpractical Rt 3.8.12
Bestpractical Rt 3.8.2
Bestpractical Rt 3.8.4
Bestpractical Rt 3.8.6
Bestpractical Rt 3.8.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »