Read the docs

Phpbugtracker Project

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Phpbugtracker Project records in CISA KEV

No Phpbugtracker Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Phpbugtracker 7 records MEDIUM

Records

7 records

TI-2015-01922 CVE-2015-2146 · GHSA-qqq8-q2f3-vw9f

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow…

Priority MEDIUM 45

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01394 Published 2017-10-06 No fix listed CWE-89
TI-2015-01919 CVE-2015-2143 · GHSA-7xrv-3459-xjhp

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker…

Priority MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0181 Published 2017-10-06 No fix listed CWE-352
TI-2015-01918 CVE-2015-2142 · GHSA-9x37-8fpw-x4hf

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker…

Priority LOW 38

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impa…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2017-10-06 No fix listed CWE-352
TI-2015-01920 CVE-2015-2144 · GHSA-c47f-685j-ch36

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; th…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00634 Published 2017-10-06 No fix listed CWE-79
Open these records in search →