| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2011-5072 | 29 Jan 201211:55 | – | attackerkb |
 | CVE-2011-5072 | 1 Feb 201200:00 | – | circl |
 | CVE-2011-5072 | 29 Jan 201211:00 | – | cvelist |
 | sit! support incident tracker 3.64 - Multiple Vulnerabilities | 1 Feb 201200:00 | – | exploitdb |
 | EUVD-2011-4972 | 7 Oct 202500:30 | – | euvd |
 | Multiple Vulnerabilities in SiT! Support Incident Tracker | 24 Aug 201100:00 | – | htbridge |
 | CVE-2011-5072 | 29 Jan 201211:55 | – | nvd |
 | Support Incident Tracker SiT! < 3.65 Multiple Vulnerabilities - Active Check | 1 Feb 201200:00 | – | openvas |
| Support Incident Tracker SiT! Multiple SQL Injection And XSS Vulnerabilities | 1 Feb 201200:00 | – | openvas |
 | Sql injection | 29 Jan 201211:55 | – | prion |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| start | query param | portal/kb.php | SQL injection via the start GET parameter in portal/kb.php | CWE-89 |
| contractid | query param | contract_add_service.php | SQL injection via the contractid GET parameter in contract_add_service.php | CWE-89 |
| mode | query param | contact_support.php | SQL injection-related or HTML/script injection via the mode parameter in contact_support.php | CWE-89 |
| contractid | query param | contract_add_service.php | HTML/script injection via the contractid GET parameter in contract_add_service.php | CWE-89 |
| user | query param | edit_backup_users.php | HTML/script injection via the user parameter in edit_backup_users.php | CWE-89 |
| id | query param | edit_escalation_path.php | SQL injection via the id GET parameter in edit_escalation_path.php | CWE-89 |
| id | query param | edit_escalation_path.php | HTML/script injection via the id parameter in edit_escalation_path.php | CWE-89 |
| userid | header | forgotpwd.php | HTML/script injection via Referer header in forgotpwd.php | CWE-89 |
| action | header | forgotpwd.php | HTML/script injection via Referer header in forgotpwd.php | CWE-89 |
| unlock | query param | holding_queue.php | SQL injection via unlock/lock parameters in holding_queue.php | CWE-89 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:35Current
8.7High risk
Vulners AI Score8.7
CVSS 27.5
EPSS0.01115