CVE-2013-3374

Unspecified vulnerability in Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13, when using the Apache::Session::File session store, allows remote attackers to obtain sensitive information user preferences and caches via unknown vectors, related to a "limited session re-use."...

CVE-2013-3369

Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors...

SourceForge.net Cross Site Scripting

Exploit Title: SourceForge.net Cross Site Scripting Date: 3.03.2012 Author: Sony Software Link: http://sourceforge.net/ Google Dorks: sourceforge.net/tracker/index.php?groupid= bugs or tracker Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...