350 matches found
sit-sc.com Cross Site Scripting vulnerability OBB-1329636
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-15308
Support Incident Tracker aka SiT! or SiTracker 3.67 p2 allows post-authentication SQL injection via the siteedit.php typeid or site parameter, the searchincidentsadvanced.php searchtitle parameter, or the reportqbe.php criteriafield parameter...
CVE-2020-15308
Support Incident Tracker (SiT!/SiTracker) 3.67 p2 has a post-authentication SQL injection vulnerability exposed via: site_edit.php (typeid or site), search_incidents_advanced.php (search_title), and report_qbe.php (criteriafield). Connected documents confirm the CVE-2020-15308 details and associa...
CVE-2020-15308: Improper Neutralization of Special Elements used in an SQL Command
Support Incident Tracker aka SiT! or SiTracker 3.67 p2 allows post-authentication SQL injection via the siteedit.php typeid or site parameter, the searchincidentsadvanced.php searchtitle parameter, or the reportqbe.php criteriafield parameter...
PT-2020-14346
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! or SiTracker version 3.67 p2 Description The issue allows post-authentication SQL injection via several parameters, including typeid or site in "site edit.php", search title in "search incidents advanced.php",...
Denial Of Service (DoS)
kernel is vulnerable to denial of service DoS. The vulnerability exists as a possible kernel memory leak was found in the Linux kernel Simple Internet Transition SIT INET6 implementation...
Vulnerability of the sit_init_net() function (net/ipv6/sit.c) in the Linux kernel, which allows a hacker to cause a service failure
The vulnerability of the sitinitnet function from net/ipv6/sit.c in the Linux kernel is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow a remote attacker to cause service failures...
CVE-2019-20222
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
CVE-2019-20221
In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...
Cross site scripting
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
CVE-2019-20220
The CVE-2019-20220 entry concerns Support Incident Tracker (SiT!) version 3.67. A cross-site scripting (XSS) flaw is located in the search_id parameter of the search_incidents_advanced.php page, arising from insufficient validation of user-supplied data. Documented impact is client-side code exec...
CVE-2019-20221
CVE-2019-20221 affects Support Incident Tracker (SiT!) version 3.67. The vulnerability is a Cross-Site Scripting (XSS) in the “Load Plugins” input on the config.php page, with the payload potentially executed on pages such as about.php. Multiple sources corroborate the issue across CVE records an...
CVE-2019-20222
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
CVE-2019-20222
The CVE-2019-20222 entry affects Support Incident Tracker (SiT!) version 3.67, where the Short Application Name and Application Name fields in the config.php page are vulnerable to cross-site scripting (XSS). Multiple connected sources (NVD entry and Red Hat security advisory) confirm the issue a...
CVE-2019-20223
CVE-2019-20223 is an XSS flaw in Support Incident Tracker (SiT!) 3.67 where the id parameter is reflected across endpoints that use it. Red Hat’s advisory reiterates the XSS in SiT! 3.67, tied to CVE-2012-2235, with no details on patches within the provided documents. The OpenVAS entry references...
PT-2020-10379
Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! version 3.67 Description The issue affects the Load Plugins input in the config.php page, which is vulnerable to cross-site scripting XSS. The XSS payload can be executed on the about.php page. Recommendations For...
PT-2020-10380
Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! version 3.67 Description The issue affects the Short Application Name and Application Name inputs in the config.php page, making them susceptible to XSS attacks. Recommendations For Support Incident Tracker SiT!...
CVE-2019-20222: Improper Neutralization of Input During Web Page Generation
In Support Incident Tracker SiT! 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS...
PT-2020-10381
Name of the Vulnerable Software and Affected Versions Support Incident Tracker SiT! version 3.67 Description The issue affects the id parameter, which is vulnerable to XSS on all endpoints that use this parameter. Recommendations For Support Incident Tracker SiT! version 3.67, avoid using the id...
CVE-2019-20221: Improper Neutralization of Input During Web Page Generation
In Support Incident Tracker SiT! 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page...