PT-2025-33082 · Traq · Traq

Name of the Vulnerable Software and Affected Versions: Traq versions 2.0 through 2.3 Description: Traq versions 2.0 through 2.3 contain a remote code execution issue in the admincp/common.php script. The flawed authorization logic does not halt execution after a failed access check, allowing...

PT-2006-5350 · Bob Jewell · Bob Jewell Discloser

Name of the Vulnerable Software and Affected Versions: Bob Jewell Discloser version 0.0.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the type parameter in the plugins/plugins.php file. However, there is a dispute about whether an attacker can control...