GCVE - cpe:2.3:a:bestpractical:rt:3.6.10:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:bestpractical:rt:3.6.10:*:*:*:*:*:*:*

part: a version: 3.6.10 update: *

Vendor	Bestpractical (`d11f033e-f22b-5ad6-b9aa-22eb35718329`)
Product	Rt (`2dd314b6-71fe-5567-80a6-d4de9e20ea7f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/bestpractical/rt`	purl2cpe	2026-06-01 10:13:31.001797

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-5092`	vulnerable	2026-06-08 04:59:34.558840	Details available Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093. Published: 2012-06-04T19:00:00.000Z Updated: 2024-09-17T03:02:30.374Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4460`	vulnerable	2026-06-08 04:59:31.309904	Details available SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-07T00:09:18.469Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://osvdb.org/82136 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html https://exchange.xforce.ibmcloud.com/vulnerabilities/75824	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4459`	vulnerable	2026-06-08 04:59:31.285907	Details available Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-07T00:09:18.484Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html http://www.securityfocus.com/bid/53660	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4458`	vulnerable	2026-06-08 04:59:31.206029	Details available Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabled, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-5092 and CVE-2011-5093. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-07T00:09:18.415Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html http://www.securityfocus.com/bid/53660	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2085`	vulnerable	2026-06-08 04:58:03.867350	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote attackers to hijack the authentication of arbitrary users. Published: 2012-06-04T19:00:00.000Z Updated: 2024-08-06T22:46:00.970Z Open on db.gcve.eu Reference links http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000203.html http://secunia.com/advisories/49259 http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000204.html http://lists.bestpractical.com/pipermail/rt-announce/2012-May/000202.html http://www.securityfocus.com/bid/53660	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2084`	vulnerable	2026-06-08 04:58:03.816239	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2083`	vulnerable	2026-06-08 04:58:03.810735	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2082`	vulnerable	2026-06-08 04:58:03.780926	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1690`	vulnerable	2026-06-08 04:58:01.474226	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1689`	vulnerable	2026-06-08 04:58:01.472908	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1688`	vulnerable	2026-06-08 04:58:01.470521	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1687`	vulnerable	2026-06-08 04:58:01.468784	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1686`	vulnerable	2026-06-08 04:58:01.466657	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.