CVE-2005-2147

Mô tả

Tham khảo

• secunia.com/advisories/15752 · Patch
• debian.org/security/2005/dsa-739
• hardened-php.net/advisory-012005.php · Patch
• securityfocus.com/bid/13990 · Patch

Lỗ hổng khác của trac

• CVE-2008-3328TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2007-1406NGHIÊM TRỌNG 10.0Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn…
• CVE-2007-1405TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor…
• CVE-2006-5878CAO 7.5Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as…
• CVE-2006-3695TRUNG BÌNH 6.8Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) …