Cvstrac

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cvstrac records in CISA KEV

No Cvstrac vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cvstrac 3 records MEDIUM

Records

3 records in Cvstrac · all components

TI-2004-01333 CVE-2004-1456 · GHSA-r4xv-jw3c-8rxv

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

MEDIUM 48

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13991 Published 2005-02-13 No fix listed

TI-2007-00337 CVE-2007-0347 · GHSA-9xh9-9f8q-v4jc

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the…

LOW 26

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of servic…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03715 Published 2007-01-29 No fix listed

TI-2004-01041 CVE-2004-1146 · GHSA-7wwq-85jx-hw9g

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01374 Published 2004-12-31 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0