cbcvebase.

Traq Project Issue Tracking System vulnerabilities

1 known vulnerability affecting traq_project/issue_tracking_system.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2011-10013P2CRITICALCVSS 10.0PoC≥ 2.0, ≤ 2.32025-08-13
CVE-2011-10013 [CRITICAL] CWE-94 CVE-2011-10013: Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.ph Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php to inject and execute arbitrary PHP code.
nvd
Traq Project Issue Tracking System vulnerabilities | cvebase