CVE-2006-2106

Description

References

• jvn.jp/jp/JVN%2384091359/index.html
• secunia.com/advisories/19870
• securitytracker.com/id · Patch
• edgewall.com/blog/news/trac_0_9_5.html · Patch
• securityfocus.com/bid/17741
• vupen.com/english/advisories/2006/1557
• exchange.xforce.ibmcloud.com/vulnerabilities/26125

Weitere Schwachstellen in trac

• CVE-2008-3328MITTEL 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2007-1406KRITISCH 10.0Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn…
• CVE-2007-1405MITTEL 4.3Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor…
• CVE-2006-5878HOCH 7.5Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as…
• CVE-2006-3695MITTEL 6.8Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) …