Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Phpbugtracker Project Clear all filters
TI-2015-01922 CVE-2015-2146 · GHSA-qqq8-q2f3-vw9f

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow…

Priority MEDIUM 45

Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php,…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01394 Published 2017-10-06 No fix listed CWE-89
TI-2015-01920 CVE-2015-2144 · GHSA-c47f-685j-ch36

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; th…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00634 Published 2017-10-06 No fix listed CWE-79
TI-2015-01919 CVE-2015-2143 · GHSA-7xrv-3459-xjhp

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker…

Priority MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0181 Published 2017-10-06 No fix listed CWE-352
TI-2015-01918 CVE-2015-2142 · GHSA-9x37-8fpw-x4hf

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker…

Priority LOW 38

Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impa…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2017-10-06 No fix listed CWE-352