54 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...
Cross site scripting
Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...
CVE-2008-0335
Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...
CVE-2008-0336
Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...
CVE-2008-0336
BugTracker.NET is affected by CSRF in versions before 2.7.2. The vulnerability allows remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, with likely references to delete_*.aspx pages and related admin pages (massedit.aspx, subscribe.aspx, fla...
CVE-2008-0336
Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...
CVE-2008-0335
BugTracker.NET contains a cross-site scripting (XSS) vulnerability (CVE-2008-0335) affecting versions before 2.7.2. The issue allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field. The public documents confirm the vulnerability exists and describe the a...
CVE-2008-0335
Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...
CVE-2008-0336: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...
CVE-2008-0335: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...
CVE-2005-0920
Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-0920
CVE-2005-0920: Bugtracker.NET 2.0.1 has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The NVD metrics show a base score of 7.5 (HIGH) with Network attack vector and no authentication. Impact noted as partial confidentiality...
CVE-2005-0920
Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-0920: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...