GCVE - cpe:2.3:a:bestpractical:rt:2.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:2.0.4:*:*:*:*:*:*:*

part: a version: 2.0.4 update: *

Vendor	Bestpractical (`d11f033e-f22b-5ad6-b9aa-22eb35718329`)
Product	Rt (`2dd314b6-71fe-5567-80a6-d4de9e20ea7f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/bestpractical/rt`	purl2cpe	2026-06-01 10:13:31.001619

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4460`	vulnerable	2026-06-08 04:59:31.301349	Details available SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-07T00:09:18.469Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://osvdb.org/82136 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html https://exchange.xforce.ibmcloud.com/vulnerabilities/75824	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2085`	vulnerable	2026-06-08 04:58:03.864444	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-06T22:46:00.970Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html http://www.securityfocus.com/bid/53660	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1689`	vulnerable	2026-06-08 04:58:01.472014	Details available Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-04-22T10:00:00.000Z Updated: 2024-08-06T22:37:25.615Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/1071 https://exchange.xforce.ibmcloud.com/vulnerabilities/66796 http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html https://bugzilla.redhat.com/show_bug.cgi?id=696795 http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1686`	vulnerable	2026-06-08 04:58:01.435619	Details available Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data. Published: 2011-04-22T10:00:00.000Z Updated: 2024-08-06T22:37:25.461Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/1071 http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html https://bugzilla.redhat.com/show_bug.cgi?id=696795 http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html http://www.securityfocus.com/bid/47383	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1008`	vulnerable	2026-06-08 04:56:40.728849	Details available Scrips_Overlay.pm in Best Practical Solutions RT before 3.8.9 does not properly restrict access to a TicketObj in a Scrip after a CurrentUser change, which allows remote authenticated users to obtain sensitive information via unspecified vectors, as demonstrated by custom-field value information, related to SQL logging. Published: 2011-02-28T15:00:00.000Z Updated: 2024-08-06T22:14:26.931Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2011/02/24/9 https://exchange.xforce.ibmcloud.com/vulnerabilities/65772 http://openwall.com/lists/oss-security/2011/02/23/22 http://openwall.com/lists/oss-security/2011/02/24/7 http://osvdb.org/71011	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1007`	vulnerable	2026-06-08 04:56:40.714437	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.