Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:2.0.5.3:*:*:*:*:*:*:*

part: a version: 2.0.5.3 update: *

VendorBestpractical (d11f033e-f22b-5ad6-b9aa-22eb35718329)
ProductRt (2dd314b6-71fe-5567-80a6-d4de9e20ea7f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/bestpractical/rt purl2cpe 2026-06-01 10:13:31.001623

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4460 vulnerable 2026-06-08 04:59:31.302949 Details available
SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.
Published: 2012-06-04T19:00:00.000Z
Updated: 2024-08-07T00:09:18.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2085 vulnerable 2026-06-08 04:58:03.864512 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users.
Published: 2012-06-04T19:00:00.000Z
Updated: 2024-08-06T22:46:00.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1689 vulnerable 2026-06-08 04:58:01.472072 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2011-04-22T10:00:00.000Z
Updated: 2024-08-06T22:37:25.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1686 vulnerable 2026-06-08 04:58:01.437262 Details available
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
Published: 2011-04-22T10:00:00.000Z
Updated: 2024-08-06T22:37:25.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1008 vulnerable 2026-06-08 04:56:40.728898 Details available
Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging.
Published: 2011-02-28T15:00:00.000Z
Updated: 2024-08-06T22:14:26.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1007 vulnerable 2026-06-08 04:56:40.716057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.