Description
SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/61434
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/513385/100/0/threaded
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/41150
Product x_refsource_confirm
http://sourceforge.net/projects/btnet/files/btnet_3_4_4_release_notes.txt/view
Scores
EPSS
0.0106
EPSS Percentile
61.2%
Details
CWE
CWE-89
Status
published
Products (50)
ifdefined/bugtracker.net
0.91
ifdefined/bugtracker.net
2.4.1
ifdefined/bugtracker.net
2.4.2
ifdefined/bugtracker.net
2.4.3
ifdefined/bugtracker.net
2.4.4
ifdefined/bugtracker.net
2.4.5
ifdefined/bugtracker.net
2.4.6
ifdefined/bugtracker.net
2.4.7
ifdefined/bugtracker.net
2.4.8
ifdefined/bugtracker.net
2.5.0
... and 40 more
Published
Aug 31, 2010
Tracked Since
Feb 18, 2026