CVE-2005-4305

概要

参考情報

• projects.edgewall.com/trac/wiki/ChangeLog
• secunia.com/advisories/18048 · Vendor Advisory
• secunia.com/advisories/18625
• securitytracker.com/id
• gentoo.org/security/en/glsa/glsa-200601-12.xml
• securityfocus.com/bid/16386
• vupen.com/english/advisories/2005/2936
• exchange.xforce.ibmcloud.com/vulnerabilities/23775

trac のその他の脆弱性

• CVE-2008-3328中 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2007-1406緊急 10.0Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn…
• CVE-2007-1405中 4.3Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor…
• CVE-2006-5878高 7.5Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as…
• CVE-2006-3695中 6.8Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) …