Vulnerabilities

TI-2012-02390 CVE-2012-2768 · GHSA-266j-ggfg-wh9m

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01187 Published 2012-08-15 No fix listed CWE-79

TI-2006-02113 CVE-2006-2169 · GHSA-m944-6vh7-h5wf

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via…

LOW 25

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0127 Published 2006-05-04 No fix listed

TI-2003-00254 CVE-2003-0273 · GHSA-j6m5-768w-r459

Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT)…

LOW 32

Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT) 1.0 through 1.0.7 allows remote attackers to execute script via message bodies.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01193 Published 2003-05-09 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in…

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via…

Cross-site scripting (XSS) vulnerability in the web interface for Request Tracker (RT)…