CVE-2005-3334

概要

参考情報

• flyspray.rocks.cc/bts/task/703
• lostmon.blogspot.com/2005/10/flyspray-bug-killer-multiple-variable.html · Exploit
• secunia.com/advisories/17316
• secunia.com/advisories/18606
• debian.org/security/2006/dsa-953
• osvdb.org/20326
• securityfocus.com/bid/15209
• exchange.xforce.ibmcloud.com/vulnerabilities/22889

flyspray のその他の脆弱性

• CVE-2017-15214中 5.4Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileg…
• CVE-2017-15213中 5.4Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via …
• CVE-2012-1058中 6.0Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for reque…
• CVE-2008-1166中 5.0Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to …
• CVE-2008-1165中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script …