Browse CVEs

HIGH 10.0 CVE-2007-1406 Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impac… Trac Mitigation only Fix from $1,9502007-03-10 HIGH 7.5 CVE-2006-5878 Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other us… Trac after 0.10 Fix from $1,9502006-11-14 MEDIUM 6.8 CVE-2006-3695 Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functiona… Trac after 0.9.5 Fix from $1,6002006-07-21 HIGH 7.5 CVE-2005-4065 SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown … Trac Patch available Fix from $1,9502005-12-07 HIGH 7.5 CVE-2005-3980 SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL com… Trac Patch available Fix from $1,9502005-12-04 MEDIUM 6.4 CVE-2005-2147 Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2) attachme… Trac Patch available Fix from $1,6002005-07-06 MEDIUM 6.4 CVE-2005-2007 Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in t… Trac Patch available Fix from $1,6002005-06-19