PT-2020-12465 · Gitlab +1 · Gitlab Ce/Ee +2

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 8.0.rc1 through 12.9 Description: The issue is related to a blind Server-Side Request Forgery SSRF in the FogBugz integration. SSRF is a type of attack where an attacker can trick a server into making requests to interna...

CVE-2020-10980: Server-Side Request Forgery (SSRF)

GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Arbitrary File Read when Moving an Issue Path Traversal in NPM Package Registry SSRF on Project Import External Users Can Create Personal Snippet Triggers Decription Can be Updated by Other Maintainers in Project Information Disclosure on Confidential Issues Moved to Private...

GitLab: Blind SSRF in FogBugz project import

Vulnerability description not provided...

Fog Creek Software FogBugz 4.0 29 Default.ASP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script...

TestingWhiz - Test Automation Tool

TestingWhiz is a test automation tool for web, database, cloud, mobile and web services/API testing from Cygnet Infotech. It has a codeless architecture based on FAST Automation Engine with 290+ readily available test commands that provide easy, intuitive and fast automation solution without...

FogBugz Interface Detection

The remote web server is running the web interface for FogBugz, a web interface for a project management software As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2006-0194

Cross-site scripting XSS vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page...

Cross site scripting

Cross-site scripting XSS vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page...

CVE-2006-0194

CVE-2006-0194 is an XSS vulnerability in FogBugz 4.029 and earlier versions up to 4.0.32/4.0.33 (per the 4.0.33 release notes). The flaw allows remote attackers to inject arbitrary script/HTML via the dest parameter on the pgLogon page. Affected product/component: FogBugz web application (default...

CVE-2006-0194

Cross-site scripting XSS vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page...

FogBugz Cross Site Scripting Vulnerability

I.Vulnerability FogBugz Cross Site Scripting Vulnerability II.Vendor Fog Creek Software www.fogcreek.com III.Affected Systems - FogBugz = 4.029 IV.About FogBugz is a complete web based project management system for software teams. Designed by Joel Spolsky of Joel on Software fame www.fogcreek.com...

CVE-2006-0194: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remote attackers to inject arbitrary web script or HTML via the dest parameter in the pgLogon page...

Fog Creek Software FogBugz 4.0 29 - 'default.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

Fog Creek Software FogBugz 4.0 29 - default.asp Cross-Site Scripting

Fog Creek Software FogBugz 4.0 29 - default.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16216/info FogBugz is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...