Show filters
16 Total Results
Displaying 11-16 of 16
Sort by:
Attacker Value
Unknown
CVE-2005-4644
Disclosure Date: December 31, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
0
Attacker Value
Unknown
CVE-2005-4305
Disclosure Date: December 17, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page.
0
Attacker Value
Unknown
CVE-2005-4065
Disclosure Date: December 07, 2005 (last updated February 22, 2025)
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
0
Attacker Value
Unknown
CVE-2005-3980
Disclosure Date: December 04, 2005 (last updated February 22, 2025)
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
0
Attacker Value
Unknown
CVE-2005-2147
Disclosure Date: July 06, 2005 (last updated February 22, 2025)
Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachment viewer scripts.
0
Attacker Value
Unknown
CVE-2005-2007
Disclosure Date: June 19, 2005 (last updated February 22, 2025)
Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
0
