FreeBSD Ports: trac, ja-trac

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-4305

Cross-site scripting XSS vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page...

CVE-2005-4305

CVE-2005-4305 describes a cross-site scripting (XSS) vulnerability in Edgewall Trac versions 0.9, 0.9.1, and 0.9.2 where un-sanitized URL data is reflected in an error page. The root cause is inadequate sanitization of URL input, enabling remote attackers to inject arbitrary script or HTML. Publi...