Summary
This host is running Support Incident Tracker and is prone to SQL injection vulnerabilities.
Impact
Successful exploitation will let attackers to manipulate SQL queries by injecting arbitrary SQL code.
Impact Level: Application.
Solution
Upgrade to Support Incident Tracker SiT! version 3.64 or later For updates refer to http://sitracker.org/
Insight
The flaws are due to improper input validation in 'tasks.php', 'report_marketing.php', 'search.php' and 'billable_incidents.php' scripts via various parameters before being used in a SQL query.
Affected
Support Incident Tracker version prior 3.63p1 and prior.
References
