FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-3980

This CVE name corresponds to:

Entered	Topic
2006-07-07	trac -- reStructuredText breach of privacy and denial of service vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-3980 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-3980
Phase	Assigned(20051204)

Description

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.

References

Source	Reference
BUGTRAQ	20051201 Edgewall Trac SQL Injection Vulnerability
CONFIRM	http://projects.edgewall.com/trac/wiki/ChangeLog
BID	15676
VUPEN	ADV-2005-2701
OSVDB	21386
SECTRACK	1015302
SECUNIA	17836
XF	trac-query-sql-injection(23461)