CVE-2025-63747

SourceForge QaTraq version 6.9.2 is shipped with enabled default administrative account credentials , allowing for immediate login via the web application login page. An attacker capable of reaching the login page can exploit this to gain administrative access due to the account's default privile...

CVE-2025-63748

QaTraq version 6.9.2 is vulnerable to an unrestricted file upload flaw within the "Test Script" module. The "Add Attachment" feature fails to enforce file type restrictions, allowing authenticated users to upload executable PHP files . An attacker can subsequently access these files via the "View...