Vulnerabilities

TI-2005-04340 CVE-2005-4609 · GHSA-8h8g-rw3h-79pw

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive…

LOW 26

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and system configuration via an invalid action parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2006-01-04 No fix listed

TI-2005-04339 CVE-2005-4608 · GHSA-7763-j2c2-xh5f

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to…

LOW 36

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via the (1) devWherePair[0], (2) orderBy, and (3) where parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01369 Published 2006-01-04 No fix listed

TI-2005-04338 CVE-2005-4607 · GHSA-r6mg-w7qh-6wmq

Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ids[0], (2) action, (3) report_id, (4) devWherePair[1][1], and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0133 Published 2006-01-04 No fix listed

Vulnerabilities

Filters

index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive…

SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows…