CVE

Id
52983  
CVE No.
CVE-2011-5071  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20120128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561427 52983 CVE-2011-5071 BUGTRAQ:20110726 [PT-2011-25] SQL injection vulnerabilities in Support Incident Tracker  View
561428 52983 CVE-2011-5071 URL:http://seclists.org/bugtraq/2011/Jul/174  View
561429 52983 CVE-2011-5071 MISC:http://en.securitylab.ru/lab/PT-2011-25  View
561430 52983 CVE-2011-5071 CONFIRM:http://sitracker.org/wiki/ReleaseNotes364  View
561431 52983 CVE-2011-5071 SECUNIA:45277  View
561432 52983 CVE-2011-5071 URL:http://secunia.com/advisories/45277  View
561433 52983 CVE-2011-5071 SECUNIA:45437  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25628 JVNDB-2012-001335 HDWiki の model/comment.class.php における SQL インジェクションの脆弱性 HDWiki の model/comment.class.php には、SQL インジェクションの脆弱性が存在します。 CVE-2011-5076 52983 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001335.html  View