CVE-2012-2235

Cross-site scripting (XSS) vulnerability in Support Incident Tracker (SiT!) 3.65 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to index.php, which is not properly handled in an error message.

• sitracker support incident tracker (<= 3.65) • sitracker support incident tracker 1.8.00 • sitracker support incident tracker 2.8.00 • sitracker support incident tracker 3.00 • sitracker support incident tracker 3.01 • sitracker support incident tracker 3.02 • sitracker support incident tracker 3.03 • sitracker support incident tracker 3.03a • sitracker support incident tracker 3.04a • sitracker support incident tracker 3.05 • sitracker support incident tracker 3.6 • sitracker support incident tracker 3.06 • sitracker support incident tracker 3.07 • sitracker support incident tracker 3.45 • sitracker support incident tracker 3.50 • sitracker support incident tracker 3.51 • sitracker support incident tracker 3.60 • sitracker support incident tracker 3.61 • sitracker support incident tracker 3.62 • sitracker support incident tracker 3.63 • sitracker support incident tracker 3.64 • sitracker support incident tracker 4.8.00 • sitracker support incident tracker 7.8.00 • sitracker support incident tracker 8.8.00 • sitracker support incident tracker 9.8.00 • sitracker support incident tracker 10.8.00 • sitracker support incident tracker 11.8.00 • sitracker support incident tracker 14.8.00 • sitracker support incident tracker 16.8.00 • sitracker support incident tracker 17.8.00 • sitracker support incident tracker 18.8.00 • sitracker support incident tracker 21.8.00 • sitracker support incident tracker 31.07.00