CVE-2013-3736

Published: May 5, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.

Affected (14)

Products: Bestpractical: Request Tracker, Rt Extension Mobileui

Bestpractical

2 products

Request Tracker

Rt Extension Mobileui

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Bestpractical Request Tracker	Version 4.0.0
Bestpractical Request Tracker	Version 4.0.10
Bestpractical Request Tracker	Version 4.0.11
Bestpractical Request Tracker	Version 4.0.12
Bestpractical Request Tracker	Version 4.0.1
Bestpractical Request Tracker	Version 4.0.2
Bestpractical Request Tracker	Version 4.0.3
Bestpractical Request Tracker	Version 4.0.4
Bestpractical Request Tracker	Version 4.0.5
Bestpractical Request Tracker	Version 4.0.6
Bestpractical Request Tracker	Version 4.0.7
Bestpractical Request Tracker	Version 4.0.8
Bestpractical Request Tracker	Version 4.0.9
Bestpractical Rt Extension Mobileui	Up to 1.02