Ifdefined Bugtracker.Net vulnerabilities
3 known vulnerabilities affecting ifdefined/bugtracker.net.
Total CVEs
3
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1LOW1
Vulnerabilities
Page 1 of 1
CVE-2010-3267P3MEDIUMCVSS 6.5PoC≤ 3.4.4v0.91+83 more2010-12-02
CVE-2010-3267 [MEDIUM] CWE-89 CVE-2010-3267: Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated use
Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these
nvd
CVE-2010-3188P3HIGHCVSS 7.5≤ 3.4.3v0.91+82 more2010-08-31
CVE-2010-3188 [HIGH] CWE-89 CVE-2010-3188: SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attacke
SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page.
nvd
CVE-2010-3266P4LOWCVSS 3.5PoC≤ 3.4.4v0.91+83 more2010-12-02
CVE-2010-3266 [LOW] CWE-79 CVE-2010-3266: Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote auth
Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx
nvd