CVE-2011-5068: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via userdelete.php and other unspecified programs...

CVE-2011-3832: Improper Control of Generation of Code

Eval injection vulnerability in config.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the applicationname parameter in a save action...

CVE-2011-3830: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter...

CVE-2011-5071: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.64 allow remote attackers to execute arbitrary SQL commands via the 1 exc parameter to reportmarketing.php, 2 selected parameter to tasks.php, 3 sites parameter to billableincidents.php, or 4 searchstring paramet...

CVE-2011-5075: Undefined Security Weakness

translate.php in Support Incident Tracker aka SiT! 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path...

CVE-2011-5072: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...

CVE-2011-5074: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

CVE-2011-3831: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name...

CVE-2011-5067: Exposure of Sensitive Information to an Unauthorized Actor

moveuploadedfile.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message...

CVE-2011-5073: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to inject arbitrary web script or HTML via the 1 mode parameter to contactsupport.php; 2 contractid parameter to contractaddservice.php; 3 user parameter to editbackupusers.ph...

CVE-2011-5070: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Support Incident Tracker aka SiT! 3.65 allow remote attackers to inject arbitrary web script or HTML via 1 the file name to incidentattachments.php; 2 unspecified vectors in linkadd.php, possibly involving origref, linkref, linktype parameters,...

CVE-2011-5069: Undefined Security Weakness

Unrestricted file upload vulnerability in incidentattachments.php in Support Incident Tracker aka SiT! 3.65 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in unspecified directory, a...

Tracker Software pdfSaver ActiveX 3.60 - pdfxctrl.dll Stack Buffer Overflow (SEH) (PoC)

Tracker Software pdfSaver ActiveX 3.60 - pdfxctrl.dll Stack Buffer Overflow SEH PoC Tracker Software pdfSaver ActiveX 3.60 pdfxctrl.dll Stack Buffer Overflow SEH Vendor: ------- Tracker Software Products Ltd. Product web page: ----------------- http://www.tracker-software.com Affected version:...

Tracker Software pdfSaver ActiveX 3.60 (pdfxctrl.dll) Stack Buffer (SEH)

Exploit for windows platform in category dos / poc Tracker Software pdfSaver ActiveX 3.60 pdfxctrl.dll Stack Buffer Overflow SEH Vendor: ------- Tracker Software Products Ltd. Product web page: ----------------- http://www.tracker-software.com Affected version: ----------------- 3.60.0128 Summary...

PT-2012-2045

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated users to obtain sensitive information via the file name in the move uploaded file.php script, which reveals the installation path in an error...

PT-2012-2053

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions 3.45 through 3.65 Description The issue allows remote attackers to obtain sensitive information via a direct request to the translate.php file using the save action, which reveals the installation pat...

PT-2012-2050

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via various parameters in different PHP files, including the start parameter to...

PT-2012-2052

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for...

PT-2012-2049

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.64 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the exc parameter to "report marketing.php", the...

PT-2012-2048

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerabilities are found...