CVE-2005-3980

Advisory

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• http://projects.edgewall.com/trac/wiki/ChangeLog
• http://www.securityfocus.com/bid/15676/
• http://secunia.com/advisories/17836/
• http://securitytracker.com/id?1015302
• http://www.osvdb.org/21386
• http://www.vupen.com/english/advisories/2005/2701
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23461
• http://www.securityfocus.com/archive/1/418294/100/0/threaded
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3980