CVE-2013-3525

SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the…

published May 10, 2013

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE: the vendor disputes this issue, stating "We were unable to replicate it, and the individual that reported it retracted their report," and "we had verified that the claimed exploit did not function according to the author's claims.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02807 · 86.3th percentile
Published
2013-05-10T21:00Z
EPSS history
Timeline
  • 10 MAY 21:00Z
    SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the…
    cvelistv5