CVE-2011-5071

no score yetEPSS 1.0%

sitracker support incident tracker: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2012-01-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sitracker:support_incident_tracker

References

http://en.securitylab.ru/lab/PT-2011-25
http://seclists.org/bugtraq/2011/Jul/174
http://secunia.com/advisories/45277
http://secunia.com/advisories/45437
http://sitracker.org/wiki/ReleaseNotes364

Check your stack JSON