CVE-2011-5071

The provided text describes a SQL injection vulnerability in Support Incident Tracker 3.63p1, where the 'selected[]' parameter in the 'tasks.php' endpoint is not properly sanitized. The example URL demonstrates how an attacker could inject malicious SQL queries.

This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker by injecting a UNION-based query to retrieve the database version. The vulnerability arises from insufficient input sanitization in the 'search_string' parameter.

This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker by injecting a single quote into the 'exc[0]' parameter in the report_marketing.php page. The lack of input sanitization allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

This exploit demonstrates a SQL injection vulnerability in Support Incident Tracker 3.63p1. The PoC uses a UNION-based SQLi to extract user and database information via the 'sites[]' parameter.