Published: 07/12/2005 Updated: 08/03/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the search module in Edgewall Trac prior to 0.9.2 allows remote malicious users to execute arbitrary SQL commands via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
edgewall software trac 0.8.3
edgewall software trac 0.8.4
edgewall software trac 0.7.1
edgewall software trac 0.8.1
edgewall software trac 0.9
edgewall software trac 0.9.1

This update corrects the search feature in trac, an enhanced wiki and issue tracking system for software development projects, which broke with the last security update For completeness please find below the original advisory text: Several vulnerabilities have been discovered in trac, an enhanced wiki and issue tracking system for software develo ...

source: wwwsecurityfocuscom/bid/15720/info Trac is prone to an SQL injection vulnerability This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query Successful exploitation could allow an attacker to compromise the application, access or modify data, or exploit vulnerabil ...

NVD-CWE-Other http://projects.edgewall.com/trac/wiki/ChangeLog http://lists.edgewall.com/archive/trac/2005-December/005777.html http://www.securityfocus.com/bid/15720 http://secunia.com/advisories/17894 http://www.osvdb.org/21459 http://www.debian.org/security/2006/dsa-951 http://secunia.com/advisories/18555 http://securityreason.com/securityalert/222 http://www.vupen.com/english/advisories/2005/2766 https://nvd.nist.gov https://www.debian.org/security/./dsa-951 https://www.exploit-db.com/exploits/26732/

CVE-2005-4065

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect