Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
Phpbugtracker ProjectPhpbugtracker

7 matches found

CVE
CVE•added 2017/10/06 10:29 p.m.•34 views

CVE-2015-2147

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.

9.8CVSS10AI score0.00368EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•33 views

CVE-2015-2145

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

4.8CVSS5.1AI score0.00278EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•32 views

CVE-2015-2143

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters.

8.8CVSS9AI score0.0026EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•29 views

CVE-2015-2148

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.

4.8CVSS5.1AI score0.00171EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•28 views

CVE-2015-2142

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, (2) hijack the authentication of users ...

8CVSS8AI score0.00208EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•28 views

CVE-2015-2144

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the ...

4.8CVSS4.8AI score0.00183EPSS
CVE
CVE•added 2017/10/06 10:29 p.m.•25 views

CVE-2015-2146

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php, the (3) status_id parameter to status.php, the (4) resolution_id parameter to ...

9.8CVSS10AI score0.00433EPSS