Security BMC Track-it! Remote Code Execution / SQL Injection October 8, 2014 007admin Leave a comment BMC Track-it! suffers from code execution, arbitrary file download, and remote SQL injection vulnerabilities.