CVE-2008-0336

Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...

CVE-2008-0335

BugTracker.NET contains a cross-site scripting (XSS) vulnerability (CVE-2008-0335) affecting versions before 2.7.2. The issue allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field. The public documents confirm the vulnerability exists and describe the a...

CVE-2008-0336

BugTracker.NET is affected by CSRF in versions before 2.7.2. The vulnerability allows remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, with likely references to delete_*.aspx pages and related admin pages (massedit.aspx, subscribe.aspx, fla...

CVE-2008-0335

Cross-site scripting XSS vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field...

CVE-2008-0336

Multiple cross-site request forgery CSRF vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and...

CVE-2005-0920

Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-0920

Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-0920

CVE-2005-0920: Bugtracker.NET 2.0.1 has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The NVD metrics show a base score of 7.5 (HIGH) with Network attack vector and no authentication. Impact noted as partial confidentiality...