← Back

CVE-2005-3980

nvd nist
Published: Dec 4, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.

Affected (15)

Edgewall Software
1 product
Trac
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Edgewall Software
Trac
Version 0.5.1
Trac
Version 0.5.2
Trac
Version 0.50.9
Trac
Version 0.6.1
Trac
Version 0.6
Trac
Version 0.7.1
Trac
Version 0.7
Trac
Version 0.8.1
Trac
Version 0.8.2
Trac
Version 0.8.3
Trac
Version 0.8.4
Trac
Version 0.8
Trac
Version 0.9
Trac
Version 0.9b1
Trac
Version 0.9b2

References (16)

Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.