Vulnerabilities

TI-2010-01992 CVE-2010-2079 · GHSA-crgx-9757-wppq

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file…

LOW 26

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file extensions, and read arbitrary files, via a trailing backslash in a URI, as demonstrated by (1) web.config\ and (2) .ascx\ files.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01397 Published 2010-05-25 No fix listed CWE-20

TI-2010-01991 CVE-2010-2078 · GHSA-r3rv-6724-59xh

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

LOW 26

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01318 Published 2010-05-25 No fix listed CWE-20

TI-2010-01959 CVE-2010-2043 · GHSA-mrhj-qvw9-qpwx

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and…

LOW 23

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and 3.5.8019.4 allows remote attackers to inject arbitrary web script or HTML via the Work_Order_Summary parameter (aka the request summary).

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01272 Published 2010-05-25 No fix listed CWE-79

Vulnerabilities

Filters

DataTrack System 3.5 allows remote attackers to bypass intended restrictions on file…

DataTrack System 3.5 allows remote attackers to list the root directory via a (1) /%u0085/ or (2) /%u00A0/ URI.

Cross-site scripting (XSS) vulnerability in Home.aspx in DataTrack System 3.5 and…