VYPR

Rtfm

by Bestpractical

CVEs (2)

  • CVE-2012-4731Nov 11, 2012
    risk 0.00cvss —epss 0.02

    FAQ manager for Request Tracker (RTFM) before 2.4.5 does not properly check user rights, which allows remote authenticated users to create arbitrary articles in arbitrary classes via unknown vectors.

  • CVE-2012-2768Aug 15, 2012
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.