CVE-2010-3266

State: Published
Severity: Not scored
Published: Dec 2, 2010
Updated: Aug 7, 2024
Reserved: Sep 9, 2010

Description

Multiple cross-site scripting (XSS) vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the pcd parameter to edit_bug.aspx, (2) the bug_id parameter to edit_comment.aspx, (3) the id parameter to edit_user_permissions2.aspx, or (4) the default_name parameter to edit_customfield.aspx. NOTE: some of these details are obtained from third party information.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXT?revision=578&view=markup
15653exploit
20101130 CORE-2010-1109 - Multiple vulnerabilities in BugTracker.Netmailing-list
45121vdb-entry
42418third-party-advisory
http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.