Summary
Support Incident Tracker (SiT!) is prone to the following input- validation vulnerabilities:
1. Multiple cross-site scripting vulnerabilities
2. Multiple SQL-injection vulnerabilities
3. Multiple cross-site request-forgery vulnerabilities
Exploiting these issues could allow an attacker to execute arbitrary code, steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Support Incident Tracker (SiT!) 3.64 is vulnerable other versions may
also be affected.
Solution
Updates are available. Please see the references for more details.
References
