CVE-2015-2143

Issue: CVE-2015-2143 affects Issuetracker phpBugTracker prior to v1.7.0 with multiple CSRF vulnerabilities that can hijack user sessions for requests causing unspecified impact. Affected component: Issuetracker/phpBugTracker; root cause described as cross-site request forgery. Documented impact r...

CVE-2015-2142

Issuetracker phpBugTracker, versions prior to 1.7.0, contains multiple CSRF vulnerabilities that allow remote authenticated users to hijack authentication of other users via various parameter tampering (id, group_id, status_id, severity_id, priority_id, os_id, database_id, site_id) across project...