Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role…
CVSS 2.0HIGH 7.5·Network·No auth·Interaction —·EPSS 0.01968·Published 2009-12-23·Fixed in 0.11.6
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the q…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.01834·Published 2008-07-27·Fixed in 0.10.5CWE-601