Bugtracker.NET Unspecified SQL Injection Vulnerabilities
BID:12925
Info
Bugtracker.NET Unspecified SQL Injection Vulnerabilities
| Bugtraq ID: | 12925 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 29 2005 12:00AM |
| Updated: | Mar 29 2005 12:00AM |
| Credit: | Reported by Maty Siman. |
| Vulnerable: |
Bugtracker.NET Bugtracker.NET 2.0.1 |
| Not Vulnerable: |
Bugtracker.NET Bugtracker.NET 2.0.2 |
Discussion
Bugtracker.NET Unspecified SQL Injection Vulnerabilities
Bugtracker.NET is prone to unspecified SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Bugtracker.NET is prone to unspecified SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
Exploit / POC
Bugtracker.NET Unspecified SQL Injection Vulnerabilities
No exploit is required.
No exploit is required.
Solution / Fix
Bugtracker.NET Unspecified SQL Injection Vulnerabilities
Solution:
This issue was fixed in Bugtracker.NET 2.0.2.
Bugtracker.NET Bugtracker.NET 2.0.1
Solution:
This issue was fixed in Bugtracker.NET 2.0.2.
Bugtracker.NET Bugtracker.NET 2.0.1
-
Bugtracker.NET Bugtracker.NET 2.0.2
http://prdownloads.sourceforge.net/btnet/btnet_2_0_2.zip?download
References
Bugtracker.NET Unspecified SQL Injection Vulnerabilities
References:
References:
- Bugtracker.NET 2.0.2 Release Notes (Bugtracker.NET)
- Home Page (Bugtracker.NET)