CVE-2004-1146

Multiple cross-site scripting XSS vulnerabilities in 1 main.c and 2 login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script...

CVSTrac < 1.1.5 Multiple XSS

The remote host seems to be running CVSTrac, a web-based bug and patch-set tracking system for CVS. According to its version number, the remote installation of CVSTrac has multiple cross-site scripting flaws. A remote attacker could exploit this by tricking a user into requesting a malicious URL,...

CVSTrac Ticket Title Arbitrary Command Execution

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to ticket titles containing a semi-colon ';' that may allow an attacker to execute arbitrary commands on the system. Nessus has determined the vulnerability...