Security BMC Track-it! Remote Code Execution / SQL Injection October 8, 2014 007admin BMC Track-it! suffers from code execution, arbitrary file download, and remote SQL injection vulnerabilities.