Trac Cross-site Scripting (XSS) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2007-1405 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/32897 · WEB
• pypa/advisory-database · WEB
• web.archive.org/web/20080801205940/http://secunia.com/advisories/24470 · WEB
• web.archive.org/web/20200228104401/http://www.securityfocus.com/bid/22888 · WEB
• trac.edgewall.org/wiki/ChangeLog · WEB
• secunia.com/advisories/24470 · Vendor Advisory
• securityfocus.com/bid/22888
• vupen.com/english/advisories/2007/0900
• GitHub Advisory GHSA-w7x2-57f7-3p3x · ADVISORY

trac 的其他漏洞

• CVE-2009-4405高危 7.5Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in…
• CVE-2008-5647中危 5.0Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack…
• CVE-2008-5646高危 7.5Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain…
• CVE-2008-3328中危 4.3Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or …
• CVE-2008-2951中危 6.1Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and …