What’s Vulnerable › Vulnerabilities

CVE-2020-15308

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-06-26 · updated 2026-06-17
• Weakness: CWE-89

Description

Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php typeid or site parameter, the search_incidents_advanced.php search_title parameter, or the report_qbe.php criteriafield parameter.

Affected products

• Turnkeylinux Support Incident Tracker: 3.67-p2

References

• https://code610.blogspot.com/2020/06/postauth-sqli-in-sitracker-v367-p2.html
• https://code610.blogspot.com/2020/06/postauth-sqli-in-sitracker-v367-p2.html

Get alerted when CVE-2020-15308 or the next vulnerability affects your stack