SQL Injection

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. SQL injection vulnerability in Approvals/ in Request Tracker (RT) 4.0.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ShowPending parameter. NOTE:…CVE-2013-3525Bestpractical · 2.8% likely

   CWE-89

2. SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by le…CVE-2011-4460Bestpractical · 1.8% likely

   CWE-89

3. Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to e…CVE-2011-1686Bestpractical · 1.3% likely

   CWE-89

4. RT: SQL injection via entry_aggregator parameter in JSON searchCVE-2026-41075bestpractical · CVSS 8.8 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.