Description (CNA)
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/418294/100/0/threaded
- http://www.osvdb.org/21386
- http://secunia.com/advisories/17836/
- http://www.vupen.com/english/advisories/2005/2701
- http://www.securityfocus.com/bid/15676/
- http://projects.edgewall.com/trac/wiki/ChangeLog
- http://securitytracker.com/id?1015302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23461
ADP enrichment
No English description supplied.
- http://www.securityfocus.com/archive/1/418294/100/0/threaded
- http://www.osvdb.org/21386
- http://secunia.com/advisories/17836/
- http://www.vupen.com/english/advisories/2005/2701
- http://www.securityfocus.com/bid/15676/
- http://projects.edgewall.com/trac/wiki/ChangeLog
- http://securitytracker.com/id?1015302
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23461