CVE-2011-1686: SQL Injection
Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1686?
CVE-2011-1686 is classified as a moderate severity vulnerability due to its potential for remote authenticated users to execute arbitrary SQL commands.
How do I fix CVE-2011-1686?
To address CVE-2011-1686, update your Best Practical Solutions RT installation to the latest version, where the SQL injection vulnerabilities have been patched.
Which software versions are affected by CVE-2011-1686?
CVE-2011-1686 impacts multiple versions of Best Practical Solutions RT, specifically from versions 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and specific 4.0.0 release candidates.
What types of attacks are possible due to CVE-2011-1686?
CVE-2011-1686 allows remote authenticated users to manipulate the database through SQL injection, leading to potential data exfiltration or database corruption.
Is CVE-2011-1686 still a risk if I'm using the latest version of RT?
If you are using the latest version of RT that has patched the vulnerabilities, CVE-2011-1686 should not pose a risk to your deployment.