Unscored DSA-2480-1 7 CVEs

request-tracker3.8 - several

Published May 24, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	request-tracker3.8	3.8.8-7+squeeze2

Vulnerabilities 7

Unscored —

CVE-2011-2082

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update t…

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-2083

Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0…

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-2084

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes…

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-2085

Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before …

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-4458

Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDom…

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-4459

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remot…

request-tracker4 Debian

Jun 4, 2012
Unscored —

CVE-2011-4460

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote…

request-tracker4 Debian

Jun 4, 2012