FreeBSD Ports: flyspray

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2007-1788

The CVE-2007-1788 entry concerns Flyspray 0.9.9 where authentication can be bypassed by a crafted POST request if PHP output_buffering is disabled or set to a low value. Multiple connected sources corroborate this, describing an authentication bypass tied to the output_buffering setting and a cra...