Filtered by vendor Edgewall Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2010-5108 2 Debian, Edgewall 2 Debian Linux, Trac 2024-11-21 7.5 High
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
CVE-2009-4405 1 Edgewall 1 Trac 2024-11-21 N/A
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."
CVE-2009-2144 3 Edgewall, Firestats, Wordpress 3 Firestats, Firestats, Wordpress 2024-11-21 N/A
SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2008-2951 2 Edgewall, Fedoraproject 2 Trac, Fedora 2024-11-21 6.1 Medium
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.