CVE-2005-4305

CVE-2005-4305 describes a cross-site scripting (XSS) vulnerability in Edgewall Trac versions 0.9, 0.9.1, and 0.9.2 where un-sanitized URL data is reflected in an error page. The root cause is inadequate sanitization of URL input, enabling remote attackers to inject arbitrary script or HTML. Publi...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

DEBIAN-CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-4065

CVE-2005-4065 is a SQL injection vulnerability in the Trac search module, affecting Trac prior to 0.9.2. The root cause is missing input sanitisation that allows an attacker to inject arbitrary SQL. The impact is remote code execution on the database level (partial confidentiality, integrity, and...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2005-4065

SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection

source: https://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

Edgewall Software Trac 0.7.10.80.9 Search Module - SQL Injection

Edgewall Software Trac 0.7.10.80.9 Search Module - SQL Injection source: https://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

CVE-2005-3980

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2005-3980

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2005-3980

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2005-3980

CVE-2005-3980 describes an SQL injection in Edgewall Trac’s ticket query module, exploitable via the group parameter. The vulnerability affects Trac 0.9 and possibly earlier, enabling remote SQL commands to be executed. Multiple sources (NVD, OSV, OpenVAS, and OSV detail entries) corroborate the ...

CVE-2005-3980

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter...

EdgewallSQL.txt

Edgewall Trac SQL Injection Vulnerability Trac is an enhanced wiki and issue tracking system for software development project. It provides an interface to Subversion. More information on http://projects.edgewall.com/trac/ Description: Malicious user can conduct SQL injection in ticket query modul...

Edgewall Trac SQL Injection Vulnerability

Edgewall Trac SQL Injection Vulnerability Trac is an enhanced wiki and issue tracking system for software development project. It provides an interface to Subversion. More information on http://projects.edgewall.com/trac/ Description: Malicious user can conduct SQL injection in ticket query modul...

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection source: https://www.securityfocus.com/bid/15676/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

Edgewall Software Trac 0.9 Ticket Query Module - SQL Injection

source: https://www.securityfocus.com/bid/15676/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application...

CVE-2005-2007

CVE-2005-2007 describes a directory-traversal vulnerability in Edgewall Trac 0.8.3 and earlier. The issue permits remote attackers to read or write arbitrary files by supplying a double-dot path in the id parameter to the (1) upload or (2) attachment scripts. The initial and connected data consis...