CVE-2007-1406

CVE-2007-1406 affects Trac before 0.10.3.1. The issue is that Trac did not send a Content-Disposition HTTP header specifying an attachment in certain “unsafe” situations, with the impact and remote attack vectors described as unknown in the sources. The connected records confirm Trac’s version ga...

CVE-2007-1405

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

CVE-2007-1405

Cross-site scripting XSS vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2007-1405

CVE-2007-1405 is a Cross-site Scripting (XSS) vulnerability in Trac’s "download wiki page as text" feature. The issue arises when using Microsoft Internet Explorer and allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Affected is Trac prior to version 0.10...

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors...

trac -- cross site scripting vulnerability

Secunia reports: The vulnerability is caused due to an error within the "download wiki page as text" function, which can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Successful exploitation may require that the victim uses IE...

GLSA-200612-14 : Trac: Cross-site request forgery

The remote host is affected by the vulnerability described in GLSA-200612-14 Trac: Cross-site request forgery Trac allows users to perform certain tasks via HTTP requests without performing correct validation on those requests. Impact : An attacker could entice an authenticated user to browse to ...

Trac: Cross-site request forgery

Background Trac is a wiki and issue tracking system for software development projects. Description Trac allows users to perform certain tasks via HTTP requests without performing correct validation on those requests. Impact An attacker could entice an authenticated user to browse to a specially...

Debian DSA-1209-2 : trac - cross-site request forgery

It was discovered that Trac, a wiki and issue tracking system for software development projects, performs insufficient validation against cross-site request forgery, which might lead to an attacker being able to perform manipulation of a Trac site with the privileges of the attacked Trac user...

PYSEC-2006-3

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

DEBIAN-CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

PYSEC-2006-3

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-5878

CVE-2006-5878 is described across multiple connected sources as a cross-site request forgery (CSRF) flaw in Trac, affecting 0.10 and earlier releases. The underlying issue is insufficient validation of HTTP requests, enabling an attacker to perform actions on behalf of an authenticated Trac user ...

CVE-2006-5878

Cross-site request forgery CSRF vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors...

[SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery

-------------------------------------------------------------------------- Debian Security Advisory DSA 1209-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 12th, 2006 http://www.debian.org/security/faq -...