Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-4873.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in BMC Track-It!, including unauthenticated .NET remoting services leading to credential disclosure and remote code execution, as well as SQL injection and arbitrary file download flaws. The document provides specific technical details, affected versions, and exploitation methods.
Description
SQL injection vulnerability in TrackItWeb/Grid/GetData in BMC Track-It! 11.3.0.355 allows remote authenticated users to execute arbitrary SQL commands via crafted POST data.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in BMC Track-It!, including unauthenticated .NET remoting services leading to credential disclosure and remote code execution, as well as SQL injection and arbitrary file download flaws. The document provides specific technical details, affected versions, and exploitation methods.