BugTracker.NET SQL Injection and Cross-Site Scripting Vulnerabilities

  Bookmark
 and Share

BugTracker.NET is a web-based bug or issue tracker implemented in ASP. The application is exposed to multiple issues because it fails to sufficiently sanitize user-supplied input. BugTracker.NET version v3.4.4 is affected.

Ref: http://www.coresecurity.com/content/multiple-vulnerabilities-in-bugtracker

10.50.47 - CVE: CVE-2010-3267,CVE-2010-3266
Platform: Web Application