CVE-2020-15308: Turnkeylinux Support Incident Tracker

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php typeid or site parameter, the search_incidents_advanced.php search_title parameter, or the report_qbe.php criteriafield parameter.

Affected products

• Turnkeylinux Support Incident Tracker: version 3.67 only

Published 2020-06-26. Last modified 2026-06-17.