Vulnerabilities > Bugtracker NET
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-01-17 | CVE-2008-0336 | Cross-Site Request Forgery (CSRF) vulnerability in Bugtracker.Net Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx. | 4.3 |
2008-01-17 | CVE-2008-0335 | Cross-Site Scripting vulnerability in Bugtracker.Net Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field. | 4.3 |
2005-05-02 | CVE-2005-0920 | SQL Injection vulnerability in Bugtracker.NET Multiple SQL injection vulnerabilities in Bugtracker.NET 2.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors. | 7.5 |