Trac@0.10 Security Vulnerabilities and Issues — Trac@0.10 CVE List

Lucene search

Edgewall SoftwareTrac0.10

3 matches found

cve•added 2008/07/27 10:41 p.m.•49 views

CVE-2008-3328

Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

4.3CVSS5.9AI score0.00504EPSS

cve•added 2007/03/10 10:19 p.m.•44 views

CVE-2007-1405

Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

4.3CVSS5.5AI score0.00351EPSS

cve•added 2007/03/10 10:19 p.m.•41 views

CVE-2007-1406

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

10CVSS6.5AI score0.00444EPSS