İçeriğe atla
Noroxi

sitracker kayıtları

sitracker üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %9,1
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2007-5635
    40Planlayın

    Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3.30 have unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    sitracker · support incident tracker23 Eki 2007

  • CVE-2011-4337
    31İzleyin

    Static code injection vulnerability in translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to inj

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-3831
    31İzleyin

    SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbit

    YüksekCVSS 7,5İstismar yokEPSS %2

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-3833
    30İzleyin

    Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users

    OrtaCVSS 6,0SilahlaştırılmışEPSS %19

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5071
    30İzleyin

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL co

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5072
    30İzleyin

    Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to execute arbitrary SQL co

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2010-1596
    27İzleyin

    Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication

    OrtaCVSS 6,8İstismar yokEPSS %2

    sitracker · support incident tracker28 Nis 2010

  • CVE-2011-5074
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to hija

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5068
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the

    OrtaCVSS 6,8İstismar yokEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-3832
    26İzleyin

    Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute

    OrtaCVSS 6,5İstismar yokEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5069
    25İzleyin

    Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated u

    OrtaCVSS 6,0İstismar yokEPSS %2

    sitracker · support incident tracker29 Oca 2012

  • CVE-2019-20223
    24İzleyin

    In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CV

    OrtaCVSS 6,1İstismar yokEPSS %1

    sitracker · support incident tracker2 Oca 2020

  • CVE-2019-20220
    24İzleyin

    In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is affected by XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    sitracker · support incident tracker2 Oca 2020

  • CVE-2019-20221
    24İzleyin

    In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    sitracker · support incident tracker2 Oca 2020

  • CVE-2019-20222
    24İzleyin

    In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS.

    OrtaCVSS 6,1İstismar yokEPSS %1

    sitracker · support incident tracker2 Oca 2020

  • CVE-2011-3829
    21İzleyin

    ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the fi

    OrtaCVSS 4,0SilahlaştırılmışEPSS %17

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5075
    21İzleyin

    translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct

    OrtaCVSS 5,0Kavram kanıtıEPSS %3

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-3830
    18İzleyin

    Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to inject arbitra

    OrtaCVSS 4,3İstismar yokEPSS %2

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5073
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) before 3.65 allow remote attackers to inject arbi

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2011-5070
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to inject arbitrary w

    OrtaCVSS 4,3İstismar yokEPSS %1

    sitracker · support incident tracker29 Oca 2012

  • CVE-2012-2235
    17İzleyin

    Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web

    OrtaCVSS 4,3İstismar yokEPSS %1

    sitracker · support incident tracker27 May 2012

  • CVE-2011-5067
    16İzleyin

    move_uploaded_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the

    OrtaCVSS 4,0İstismar yokEPSS %1

    sitracker · support incident tracker29 Oca 2012