CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3525

SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted their report," and "we had verified that the claimed exploit did not function according to the author's claims.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.028

EPSS Ranking 85.2%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2013-3525

Bestpractical » Request Tracker » Version: 3.6.10

cpe:2.3:a:bestpractical:request_tracker:3.6.10
Bestpractical » Request Tracker » Version: 3.6.11

cpe:2.3:a:bestpractical:request_tracker:3.6.11
Bestpractical » Request Tracker » Version: 3.6.8

cpe:2.3:a:bestpractical:request_tracker:3.6.8
Bestpractical » Request Tracker » Version: 3.8.10

cpe:2.3:a:bestpractical:request_tracker:3.8.10
Bestpractical » Request Tracker » Version: 3.8.11

cpe:2.3:a:bestpractical:request_tracker:3.8.11
Bestpractical » Request Tracker » Version: 3.8.12

cpe:2.3:a:bestpractical:request_tracker:3.8.12
Bestpractical » Request Tracker » Version: 3.8.13

cpe:2.3:a:bestpractical:request_tracker:3.8.13
Bestpractical » Request Tracker » Version: 3.8.14

cpe:2.3:a:bestpractical:request_tracker:3.8.14
Bestpractical » Request Tracker » Version: 3.8.15

cpe:2.3:a:bestpractical:request_tracker:3.8.15
Bestpractical » Request Tracker » Version: 3.8.16

cpe:2.3:a:bestpractical:request_tracker:3.8.16
Bestpractical » Request Tracker » Version: 3.8.17

cpe:2.3:a:bestpractical:request_tracker:3.8.17
Bestpractical » Request Tracker » Version: 3.8.3

cpe:2.3:a:bestpractical:request_tracker:3.8.3
Bestpractical » Request Tracker » Version: 3.8.4

cpe:2.3:a:bestpractical:request_tracker:3.8.4
Bestpractical » Request Tracker » Version: 3.8.7

cpe:2.3:a:bestpractical:request_tracker:3.8.7
Bestpractical » Request Tracker » Version: 3.8.8

cpe:2.3:a:bestpractical:request_tracker:3.8.8
Bestpractical » Request Tracker » Version: 3.8.9

cpe:2.3:a:bestpractical:request_tracker:3.8.9
Bestpractical » Request Tracker » Version: 4.0.0

cpe:2.3:a:bestpractical:request_tracker:4.0.0
Bestpractical » Request Tracker » Version: 4.0.1

cpe:2.3:a:bestpractical:request_tracker:4.0.1
Bestpractical » Request Tracker » Version: 4.0.2

cpe:2.3:a:bestpractical:request_tracker:4.0.2
Bestpractical » Request Tracker » Version: 4.0.3

cpe:2.3:a:bestpractical:request_tracker:4.0.3
Bestpractical » Request Tracker » Version: 4.0.4

cpe:2.3:a:bestpractical:request_tracker:4.0.4
Bestpractical » Request Tracker » Version: 4.0.5

cpe:2.3:a:bestpractical:request_tracker:4.0.5
Bestpractical » Request Tracker » Version: 4.0.6

cpe:2.3:a:bestpractical:request_tracker:4.0.6
Bestpractical » Request Tracker » Version: 4.0.7

cpe:2.3:a:bestpractical:request_tracker:4.0.7
Bestpractical » Request Tracker » Version: 4.0.8

cpe:2.3:a:bestpractical:request_tracker:4.0.8
Bestpractical » Request Tracker » Version: 4.0.9

cpe:2.3:a:bestpractical:request_tracker:4.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-3525

Products

Pricing

Contact Us