Vulnerability Details CVE-2005-3980
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://projects.edgewall.com/trac/wiki/ChangeLog
- http://secunia.com/advisories/17836/
- http://securitytracker.com/id?1015302
- http://www.osvdb.org/21386
- http://www.securityfocus.com/archive/1/418294/100/0/threaded
- http://www.securityfocus.com/bid/15676/
- http://www.vupen.com/english/advisories/2005/2701
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23461
- http://projects.edgewall.com/trac/wiki/ChangeLog
- http://secunia.com/advisories/17836/
- http://securitytracker.com/id?1015302
- http://www.osvdb.org/21386
- http://www.securityfocus.com/archive/1/418294/100/0/threaded
- http://www.securityfocus.com/bid/15676/
- http://www.vupen.com/english/advisories/2005/2701
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23461
Products affected by CVE-2005-3980
-
cpe:2.3:a:edgewall_software:trac:0.5.1
-
cpe:2.3:a:edgewall_software:trac:0.5.2
-
cpe:2.3:a:edgewall_software:trac:0.50.9
-
cpe:2.3:a:edgewall_software:trac:0.6
-
cpe:2.3:a:edgewall_software:trac:0.6.1
-
cpe:2.3:a:edgewall_software:trac:0.7
-
cpe:2.3:a:edgewall_software:trac:0.7.1
-
cpe:2.3:a:edgewall_software:trac:0.8
-
cpe:2.3:a:edgewall_software:trac:0.8.1
-
cpe:2.3:a:edgewall_software:trac:0.8.2
-
cpe:2.3:a:edgewall_software:trac:0.8.3
-
cpe:2.3:a:edgewall_software:trac:0.8.4
-
cpe:2.3:a:edgewall_software:trac:0.9
-
cpe:2.3:a:edgewall_software:trac:0.9b1
-
cpe:2.3:a:edgewall_software:trac:0.9b2