cbcvebase.

Getontracks Tracks vulnerabilities

1 known vulnerability affecting getontracks/tracks.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2011-1671P4MEDIUMCVSS 4.3PoCv1.7.2v2.02011-04-10
CVE-2011-1671 [MEDIUM] CWE-79 CVE-2011-1671: Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0 Cross-site scripting (XSS) vulnerability in app/controllers/todos_controller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to todos/tag/. NOTE: some of these details are obtained from third party information.
nvd
Getontracks Tracks vulnerabilities | cvebase