Design/Logic Flaw

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

CVE-2006-2169

CVE-2006-2169 affects RT: Request Tracker 3.5.HEAD. The vulnerability is described as a leak of the installation path via the Rows parameter in Dist/Display.html, exposed in an error message. The provided documents confirm the affected software and the underlying cause (exposed path information) ...

CVE-2006-2169: Undefined Security Weakness

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

RT: Request Tracker 'ShowConfigTab' Security Bypass

Binary data 5078.prm...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...

CVE-2003-0273

The CVE-2003-0273 entry describes a cross-site scripting (XSS) vulnerability in the web interface of Request Tracker (RT) versions 1.0 through 1.0.7, allowing remote attackers to execute script via message bodies. CVSS v2 base metrics indicate a Medium impact with Partial confidentiality, integri...

CVE-2003-0273: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web interface for Request Tracker RT 1.0 through 1.0.7 allows remote attackers to execute script via message bodies...