Cross-Site Request Forgery Vulnerability in BugTracker.NET by SourceForge
CVE-2008-0336

Currently unrated

Key Information:

Vendor: Bugtracker.net
Status: Bugtracker.net
Vendor: CVE Published:; 17 January 2008

🔔 Create Bugtracker.net Vulnerability Alert

What is CVE-2008-0336?

BugTracker.NET has multiple cross-site request forgery vulnerabilities that enable remote attackers to delete arbitrary bugs and execute various administrative actions. These vulnerabilities exist in versions prior to 2.7.2 and can be exploited through unspecified vectors, likely involving certain pages such as delete_*.aspx, massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx. This puts the integrity of bug management at risk, allowing unauthorized changes to the system.

References

http://sourceforge.net/project/shownotes.php?group_id=668...

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/39651

vdb-entryx_refsource_XF

http://secunia.com/advisories/28481

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 17, 2008
Vulnerability Reserved
Jan 17, 2008

CVE-2008-0336 Data

JSON