90 matches found
CVE-2015-2142
Issuetracker phpBugTracker, versions prior to 1.7.0, contains multiple CSRF vulnerabilities that allow remote authenticated users to hijack authentication of other users via various parameter tampering (id, group_id, status_id, severity_id, priority_id, os_id, database_id, site_id) across project...
CVE-2015-2146
Issuetracker phpBugTracker is affected by SQL injection vulnerabilities in versions before 1.7.0. Multiple parameters (id in project.php; group_id in group.php; status_id in status.php; resolution_id in resolution.php; severity_id in severity.php; priority_id in priority.php; os_id in os.php; sit...
phpBugTracker 1.6.0 /admin/status.php SQL注入
No description provided by source...
phpBugTracker 1.6.0 /admin/project.php SQL注入
No description provided by source...
phpBugTracker 1.6.0 /admin/resolution.php SQL注入
No description provided by source...
Multiple vulnerabilities in phpBugTracker
phpBugTracker is a web-based bug tracker provides features similar to other defect tracking systems . phpBugTracker has several security vulnerabilities that allow attackers to exploit vulnerabilities for HTML injection, cross-site scripting vulnerability, cross-site request forgery and SQL...
phpBugTracker 1.6.0 - Multiple Vulnerabilities
phpBugTracker 1.6.0 - Multiple Vulnerabilities Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor...
phpBugTracker 1.6.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor Status: patched CVE-I...
phpBugTracker 1.6.0 - Multiple Vulnerabilities
Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor Status: patched CVE-ID: will asked to be...
phpBugTracker 1.6.0 CSRF / XSS / SQL Injection
Advisory: Multiple SQLi, stored/reflecting XSS- and CSRF-vulnerabilities in phpBugTracker v.1.6.0 Advisory ID: SROEADV-2015-16 Author: Steffen Rösemann Affected Software: phpBugTracker v.1.6.0 Vendor URL: https://github.com/a-v-k/phpBugTracker Vendor Status: patched CVE-ID: will asked to be...
phpBugTracker 0.9 bug.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the...
phpBugTracker 0.9 query.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the...
phpBugTracker 0.9 bug.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the...
phpBugTracker 0.9 user.php bugid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the...
phpBugTracker 0.9 query.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the...
phpBugTracker 1.0.1 - File Disclosure Vulnerability
No description provided by source...
phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities
This host is running phpBugTracker and is prone to multiple reflected cross-site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodphpbugtrackermultiplexss.nasl 7029 2017-08-31 11:51:40Z teissa $ phpBugTracker Multiple Reflected Cross Site Scripting Vulnerabilities Authors: Antu...
phpBugTracker <= 1.0.5 Multiple XSS Vulnerabilities - Active Check
phpBugTracker is prone to multiple reflected cross-site scripting XSS vulnerabilities. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
phpBugTracker 1.0.5 Cross Site Scripting
phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities Vendor: Benjamin Curtis Product web page: http://phpbt.sourceforge.net/ Affected version: 1.0.5 Summary: phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses...
phpBugTracker 1.0.5 Multiple Reflected XSS Vulnerabilities
Summary phpBugTracker is a web-based bug tracker with functionality similar to other issue tracking systems, such as Bugzilla. Design focuses on separating the presentation, application, and database layers. phpBugTracker is lightweight and easy to install, operate and administer. Most text can b...