Unrated severityNVD Advisory· Published Jan 29, 2012· Updated Apr 29, 2026
CVE-2011-5071
CVE-2011-5071
Description
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
Affected products
28cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:*+ 27 more
- cpe:2.3:a:sitracker:support_incident_tracker:*:*:*:*:*:*:*:*range: <=3.63
- cpe:2.3:a:sitracker:support_incident_tracker:3.6:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.21:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.22:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.22pl1:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.23:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.24:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.24:beta-2:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.30:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.30:beta2:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.31:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.32:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.33:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.35:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.35:beta1:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.36:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.40:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.40:beta1:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.41:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.45:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.45:beta1:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.50:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.50:beta1:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.51:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.60:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.61:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.62:*:*:*:*:*:*:*
- cpe:2.3:a:sitracker:support_incident_tracker:3.63:beta1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- secunia.com/advisories/45277nvdVendor Advisory
- secunia.com/advisories/45437nvdVendor Advisory
- en.securitylab.ru/lab/PT-2011-25nvd
- seclists.org/bugtraq/2011/Jul/174nvd
- sitracker.org/wiki/ReleaseNotes364nvd
News mentions
0No linked articles in our index yet.