{"vulnerability": "cve-2014-4872", "sightings": [{"uuid": "f3b0a62d-14e3-4ed5-b882-72860b85aeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "7ffefe0b-2714-4ae8-b40a-6495ca3741d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:29.000000Z"}, {"uuid": "88276936-6c00-44bc-b0fb-9eaecd9d0f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trackit_file_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "11d94159-2a66-4eea-9f20-23ffb6657427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/trackit_sql_domain_creds.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8b37dd26-4e1c-47c1-a968-c9d4a54dde24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-4872", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35032", "content": "", "creation_timestamp": "2014-10-21T00:00:00.000000Z"}, {"uuid": "7f616111-191c-43e5-bb19-4992bce3eda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/trackit_sql_domain_creds.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated configuration retrieval .NET remoting\\n          service in Numara / BMC Track-It! v9 to v11.X, which can be abused to retrieve the Domain\\n          Administrator and the SQL server user credentials.\\n          This module has been tested successfully on versions 11.3.0.355, 10.0.51.135, 10.0.50.107,\\n          10.0.0.143 and 9.0.30.248.\", \"disclosure_date\": \"2014-10-07\", \"fullname\": \"auxiliary/gather/trackit_sql_domain_creds\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"BMC / Numara Track-It! Domain Administrator and SQL Server User Password Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/trackit_sql_domain_creds.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/trackit_sql_domain_creds\", \"references\": [\"CVE-2014-4872\", \"OSVDB-112741\", \"US-CERT-VU-121036\", \"URL-https://seclists.org/fulldisclosure/2014/Oct/34\"], \"rport\": 9010, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:22.482894Z"}, {"uuid": "8e5094d4-5c2b-4bcd-87c4-240443557fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4872", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trackit_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Pedro Ribeiro \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an arbitrary file upload vulnerability in Numara / BMC Track-It!\\n          v8 to v11.X.\\n          The application exposes the FileStorageService .NET remoting service on port 9010\\n          (9004 for version 8) which accepts unauthenticated uploads. This can be abused by\\n          a malicious user to upload a ASP or ASPX file to the web root leading to arbitrary\\n          code execution as NETWORK SERVICE or SYSTEM.\\n          This module has been tested successfully on versions 11.3.0.355, 10.0.51.135, 10.0.50.107,\\n          10.0.0.143, 9.0.30.248 and 8.0.2.51.\", \"disclosure_date\": \"2014-10-07\", \"fullname\": \"exploit/windows/http/trackit_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"Numara / BMC Track-It! FileStorageService Arbitrary File Upload\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/trackit_file_upload.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/trackit_file_upload\", \"references\": [\"CVE-2014-4872\", \"OSVDB-112741\", \"US-CERT-VU-121036\", \"URL-https://seclists.org/fulldisclosure/2014/Oct/34\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Numara / BMC Track-It! v9 to v11.X - Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:01.348216Z"}]}