Phpbugtracker Project Phpbugtracker vulnerabilities
7 known vulnerabilities affecting phpbugtracker_project/phpbugtracker.
Total CVEs
7
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2015-2147P2CRITICALCVSS 9.8PoC≤ 1.6.02017-10-06
CVE-2015-2147 [CRITICAL] CWE-89 CVE-2015-2147: Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attac
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.
nvd
CVE-2015-2143P3HIGHCVSS 8.8PoC≤ 1.6.02017-10-06
CVE-2015-2143 [HIGH] CWE-352 CVE-2015-2143: Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.
Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to hijack the authentication of users for requests that cause an unspecified impact via unknown parameters.
nvd
CVE-2015-2142P3HIGHCVSS 8.0PoC≤ 1.6.02017-10-06
CVE-2015-2142 [HIGH] CWE-352 CVE-2015-2142: Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.
Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to (1) hijack the authentication of users for requests that cause an unspecified impact via the id parameter to project.php, (2) hijack the authentication of users for requests that cause an unspecified impact via the gr
nvd
CVE-2015-2146P3CRITICALCVSS 9.8≤ 1.6.02017-10-06
CVE-2015-2146 [CRITICAL] CWE-89 CVE-2015-2146: Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attac
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php, the (3) status_id parameter to status.php, the (4) resolution_id parameter to resolution.php, the (5) severity_id parameter to seve
nvd
CVE-2015-2145P4MEDIUMCVSS 4.8PoC≤ 1.6.02017-10-06
CVE-2015-2145 [MEDIUM] CWE-79 CVE-2015-2145: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
nvd
CVE-2015-2148P4MEDIUMCVSS 4.8≤ 1.7.02017-10-06
CVE-2015-2148 [MEDIUM] CWE-79 CVE-2015-2148: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
nvd
CVE-2015-2144P4MEDIUMCVSS 4.8≤ 1.6.02017-10-06
CVE-2015-2144 [MEDIUM] CWE-79 CVE-2015-2144: Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description parameter to status.php; the (5) Descri
nvd