PT-2013-4455 · Best Practical · Request Tracker

Name of the Vulnerable Software and Affected Versions: Request Tracker RT versions 4.0.10 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter in the Approvals/ section. The vendor disputes this issue, stating they...