Security Advisory

CVE-2008-0336

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-01-17 21:07:00
Last updated 2024-08-07 07:39:35
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.