phpBugTracker 'include.php' SQL Injection Vulnerability

According to its version number, the remote version of phpBugTracker is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

phpBugTracker <= 1.0.4 SQLi Vulnerability

phpBugTracker is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

phpBugTracker Detection (HTTP)

HTTP based detection of phpBugTracker. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100217";...

CVE-2009-1851: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-1850: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter...

phpBugTracker 1.0.3 SQL Injection

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / /...

phpBugTracker 1.0.3 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ...

phpBugTracker 1.0.3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpBugTracker 1.0.3 Auth Bypass SQL Injection Vulnerability ============================================================= @email protected .--"""""--. .' '. / \ ; C4TEAM ; | | |...

phpBugTracker 1.0.3 - Authentication Bypass

phpBugTracker 1.0.3 - Authentication Bypass @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ .--"""""--. .' '. / \ ; C4TEAM ; |...

phpBugTracker 1.0.3 - Authentication Bypass

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ .--"""""--. .' '. / \ ; C4TEAM ; | | | | ; ; ByALBAYX \ '--, ,--' / \ \ / /...

phpBugTracker bug.php SQLi Vulnerability - Active Check

There is a bug in the remote version of phpBugTracker which makes it vulnerable to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2004-1519

The CVE-2004-1519 entry is confirmed with concrete details across connected sources: phpBugTracker 0.9.1 is affected by an SQL injection in bug.php. Specifically, the vulnerability allows remote attackers to manipulate the database via (1) the bug_id parameter in a viewvotes operation or (2) the ...

CVE-2004-1519

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

CVE-2004-1519: Undefined Security Weakness

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

CVE-2004-1519

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

phpBugTracker 0.9 - 'user.php?bugid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

phpBugTracker 0.9 - 'query.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

phpBugTracker 0.9 - bug.php Multiple SQL Injections

phpBugTracker 0.9 - bug.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to ...

phpBugTracker 0.9.1 - Multiple Vulnerabilities

phpBugTracker 0.9.1 - Multiple Vulnerabilities phpBugTracke Multiple Vulnerabilities Vendor: Benjamin Curtis Product: phpBugTracke Version: query"delete from ".TBLBUGVOTE." where userid = $u and bugid = $bugid"; As we can see from that line of code taken from about line 30 of user.php it is clear...

phpBugTracker < 0.9.1 - Multiple Vulnerabilities

phpBugTracke Multiple Vulnerabilities Vendor: Benjamin Curtis Product: phpBugTracke Version: query"delete from ".TBLBUGVOTE." where userid = $u and bugid = $bugid"; As we can see from that line of code taken from about line 30 of user.php it is clear that the $bugid variable is passed into the...