Edgewall : Security Vulnerabilities, CVEs, CVSS score >= 6
Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions.
Max CVSS
7.5
EPSS Score
0.27%
Published
2019-11-13
Updated
2019-11-18
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6."
Max CVSS
7.5
EPSS Score
0.59%
Published
2009-12-23
Updated
2017-08-17
SQL injection vulnerability in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Max CVSS
7.5
EPSS Score
0.12%
Published
2009-06-22
Updated
2009-08-21
Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function.
Max CVSS
6.1
EPSS Score
0.25%
Published
2008-07-27
Updated
2024-02-09
4 vulnerabilities found