CVE-2012-2235 Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is....
MediumCVSS 4.3
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sitracker support incident tracker | <= 3.65 | No fix listed |
| sitracker support incident tracker | = 1.8.00 | No fix listed |
| sitracker support incident tracker | = 2.8.00 | No fix listed |
| sitracker support incident tracker | = 3.00 | No fix listed |
| sitracker support incident tracker | = 3.00-beta1 | No fix listed |
| sitracker support incident tracker | = 3.00-beta2 | No fix listed |
| sitracker support incident tracker | = 3.00-beta3 | No fix listed |
| sitracker support incident tracker | = 3.01 | No fix listed |
| sitracker support incident tracker | = 3.02 | No fix listed |
| sitracker support incident tracker | = 3.03 | No fix listed |
| sitracker support incident tracker | = 3.03a | No fix listed |
| sitracker support incident tracker | = 3.04a | No fix listed |
| sitracker support incident tracker | = 3.05 | No fix listed |
| sitracker support incident tracker | = 3.6 | No fix listed |
| sitracker support incident tracker | = 3.06 | No fix listed |
| sitracker support incident tracker | = 3.07 | No fix listed |
| sitracker support incident tracker | = 3.45 | No fix listed |
| sitracker support incident tracker | = 3.45-beta1 | No fix listed |
| sitracker support incident tracker | = 3.50 | No fix listed |
| sitracker support incident tracker | = 3.50-beta1 | No fix listed |
| sitracker support incident tracker | = 3.51 | No fix listed |
| sitracker support incident tracker | = 3.60 | No fix listed |
| sitracker support incident tracker | = 3.61 | No fix listed |
| sitracker support incident tracker | = 3.62 | No fix listed |
| sitracker support incident tracker | = 3.63 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sitracker support incident tracker | = 3.63-beta1 | No fix listed |
| sitracker support incident tracker | = 3.64 | No fix listed |
| sitracker support incident tracker | = 4.8.00 | No fix listed |
| sitracker support incident tracker | = 7.8.00 | No fix listed |
| sitracker support incident tracker | = 8.8.00 | No fix listed |
| sitracker support incident tracker | = 9.8.00 | No fix listed |
| sitracker support incident tracker | = 10.8.00 | No fix listed |
| sitracker support incident tracker | = 11.8.00 | No fix listed |
| sitracker support incident tracker | = 14.8.00 | No fix listed |
| sitracker support incident tracker | = 16.8.00 | No fix listed |
| sitracker support incident tracker | = 17.8.00 | No fix listed |
| sitracker support incident tracker | = 18.8.00 | No fix listed |
| sitracker support incident tracker | = 21.8.00 | No fix listed |
| sitracker support incident tracker | = 31.07.00 | No fix listed |
References
- www.trustwave.com exploit