1. CVE-Search
  2. CVE-2005-3980
ID CVE-2005-3980
Summary SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:edgewall_software:trac:0.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.6:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.6.1:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.6.1:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.7:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.8:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.8.4:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.8.4:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.9b1:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.9b1:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.9b2:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.9b2:*:*:*:*:*:*:*
  • cpe:2.3:a:edgewall_software:trac:0.50.9:*:*:*:*:*:*:*
    cpe:2.3:a:edgewall_software:trac:0.50.9:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 19-10-2018 - 15:39)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 15676
bugtraq 20051201 Edgewall Trac SQL Injection Vulnerability
confirm http://projects.edgewall.com/trac/wiki/ChangeLog
osvdb 21386
sectrack 1015302
secunia 17836
vupen ADV-2005-2701
xf trac-query-sql-injection(23461)
Last major update 19-10-2018 - 15:39
Published 04-12-2005 - 11:03
Last modified 19-10-2018 - 15:39
Back to Top