CVE

Id
63472  
CVE No.
CVE-2013-3525  
Status
Candidate  
Description
** DISPUTED ** SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted their report," and "we had verified that the claimed exploit did not function according to the author"s claims."  
Phase
Assigned (20130510)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
629657 63472 CVE-2013-3525 MISC:http://blog.bestpractical.com/2013/04/on-our-security-policies.html  View
629658 63472 CVE-2013-3525 MISC:http://cxsecurity.com/issue/WLB-2013040083  View
629659 63472 CVE-2013-3525 MISC:http://packetstormsecurity.com/files/121245/RT-Request-Tracker-4.0.10-SQL-Injection.html  View
629660 63472 CVE-2013-3525 BID:59022  View
629661 63472 CVE-2013-3525 URL:http://www.securityfocus.com/bid/59022  View
629662 63472 CVE-2013-3525 OSVDB:92265  View
629663 63472 CVE-2013-3525 URL:http://osvdb.org/92265  View
629664 63472 CVE-2013-3525 XF:requesttracker-showpending-sql-injection(83375)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21063 JVNDB-2013-002638 WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性 WordPress 用 Spiffy XSPF Player プラグインの playlist.php には、SQL インジェクションの脆弱性が存在します。 CVE-2013-3530 63472 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002638.html  View