CVE-2019-20222

概要

参考情報

• fatihhcelik.blogspot.com/2019/12/support-incident-tracker-xss-in-short.html · Exploit

support incident tracker のその他の脆弱性

• CVE-2019-20223中 6.1In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CV…
• CVE-2019-20221中 6.1In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, exec…
• CVE-2019-20220中 6.1In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is affected by XSS.
• CVE-2012-2235中 4.3Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web…
• CVE-2011-5075中 5.0translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct …