CVE-2008-0336

MEDIUM 4.3CVE-2008-0336 · Published 17/01/2008 · updated 16/06/2026

In short

CVE-2008-0336 is a MEDIUM (CVSS 4.3) vulnerability affecting bugtracker.net (bugtracker.net).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 45.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bugtracker.net bugtracker.net	`≤ 2.7.1`	No fix yet

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.

References

secunia.com/advisories/28481 · Vendor Advisory
sourceforge.net/project/shownotes.php · Patch
sourceforge.net/tracker/index.php
exchange.xforce.ibmcloud.com/vulnerabilities/39651

More vulnerabilities in bugtracker.net

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free