Vulnerabilities

TI-2007-00337 CVE-2007-0347 · GHSA-9xh9-9f8q-v4jc

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the…

LOW 26

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authenticated users to execute limited SQL injection attacks and cause a denial of servic…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03715 Published 2007-01-29 No fix listed

TI-2004-01333 CVE-2004-1456 · GHSA-r4xv-jw3c-8rxv

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

MEDIUM 48

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13991 Published 2005-02-13 No fix listed

TI-2004-01041 CVE-2004-1146 · GHSA-7wwq-85jx-hw9g

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01374 Published 2004-12-31 No fix listed

Vulnerabilities

Filters

The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the…

filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.

Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for…