CVE-2026-92531

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...

CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...

CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...

CVE-2026-92531

BugTracker.NET contains an operating system command injection vulnerability in its SVN integration component . The application fails to properly validate the repository field value before incorporating it into an svn.exe command. An authenticated user with administrator privileges can store manip...

EUVD-2026-94283

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges coul...

Information disclosure

The Bug Genie 2.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/svnintegration/config.inc.php and certain other files...