CVE-2014-4874

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• BMC Track-It! - Multiple Vulnerabilities2014-10-09 · webapps · windows

Impact

BMC Track-It! 11.3.0.355 allows remote authenticated users to read arbitrary files by visiting the TrackItWeb/Attachment page.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.html
• http://www.kb.cert.org/vuls/id/121036
• https://raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txt
• http://packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.html
• http://www.kb.cert.org/vuls/id/121036
• https://raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txt