CVE-2011-5071
Support Incident Tracker < 3.64 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2011-5071. PoCs published by Yuri Goltsev.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in Support Incident Tracker 3.63p1, where the 'selected[]' parameter in the 'tasks.php' endpoint is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries.
Description
Multiple SQL injection vulnerabilities in Support Incident Tracker (aka SiT!) before 3.64 allow remote attackers to execute arbitrary SQL commands via the (1) exc[] parameter to report_marketing.php, (2) selected[] parameter to tasks.php, (3) sites[] parameter to billable_incidents.php, or (4) search_string parameter to search.php. NOTE: some of these details are obtained from third party information.
Exploits (4)
The provided text describes a SQL injection vulnerability in Support Incident Tracker 3.63p1, where the 'selected[]' parameter in the 'tasks.php' endpoint is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries.
This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker by injecting a UNION-based query to retrieve the database version. The vulnerability arises from insufficient input sanitization in the 'search_string' parameter.
This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker by injecting a single quote into the 'exc[0]' parameter in the report_marketing.php page. The lack of input sanitization allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.
This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker 3.63p1. The PoC uses a UNION-based SQLi to extract user and database information via the 'sites[]' parameter.