Vulnerabilities > Bugtracker NET

DATE CVE VULNERABILITY TITLE RISK
2008-01-17 CVE-2008-0336 Cross-Site Request Forgery (CSRF) vulnerability in Bugtracker.Net
Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.
4.3
2008-01-17 CVE-2008-0335 Cross-Site Scripting vulnerability in Bugtracker.Net
Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field.
4.3
2005-05-02 CVE-2005-0920 SQL Injection vulnerability in Bugtracker.NET
Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
network
low complexity
bugtracker-net
7.5