Unrated severityNVD Advisory· Published Oct 10, 2014· Updated May 6, 2026

CVE-2014-4873

Description

SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.

Affected products

BMC Software/Track It\!
cpe:2.3:a:bmc:track-it\!:11.3.0.355:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txtnvdExploit
www.kb.cert.org/vuls/id/121036nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/70268nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000