Unscored DSA-2220-1 6 CVEs

request-tracker3.8 - several

Published Apr 19, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	request-tracker3.6	3.6.7-5+lenny6
Debian · 6.0	request-tracker3.8	3.8.8-7+squeeze1

Vulnerabilities 6

Unscored —

CVE-2011-1685

Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka ex…

Apr 22, 2011
Unscored —

CVE-2011-1686

Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.…

Apr 22, 2011
Unscored —

CVE-2011-1687

Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authe…

Apr 22, 2011
Unscored —

CVE-2011-1688

Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc…

Apr 22, 2011
Unscored —

CVE-2011-1689

Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through …

Apr 22, 2011
Unscored —

CVE-2011-1690

Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into se…

Apr 22, 2011