Vulnerabilities

TI-2026-69110 CVE-2026-92533 · GHSA-4gg8-j6f5-xp7v

Path traversal in BugTracker.NET lets attackers read system files

LOW 31

Path traversal vulnerability in the BugTracker.NET file download component.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00363 Published 2026-10-07 No fix listed CWE-24

TI-2026-69109 CVE-2026-92532 · GHSA-h4mm-35cr-vc9q

Unrestricted file upload in BugTracker.NET attachments

LOW 35

Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.003 Published 2026-10-07 No fix listed CWE-434

TI-2026-69108 CVE-2026-92531 · GHSA-3crv-25xx-hhf4

OS command injection in BugTracker.NET SVN integration

LOW 37

Operating system command injection vulnerability in the SVN integration component of BugTracker.NET.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.0093 Published 2026-10-07 No fix listed CWE-78

TI-2008-00311 CVE-2008-0336 · GHSA-vfq5-mm65-6p52

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2…

LOW 21

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related t…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0053 Published 2008-01-17 No fix listed CWE-352

TI-2008-00310 CVE-2008-0335 · GHSA-x4v7-pc45-2jw2

Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-01-17 No fix listed CWE-79