Bugtracker.net » Bugtracker.net : Security Vulnerabilities, CVEs,
Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.
Max CVSS
4.3
EPSS Score
0.15%
Published
2008-01-17
Updated
2017-08-08
Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom text field.
Max CVSS
4.3
EPSS Score
0.25%
Published
2008-01-17
Updated
2017-08-08
2 vulnerabilities found