Product
cvstrac
3 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2007-0347
CVE-2004-1456
CVE-2004-1146
<= 2.0
The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote
all versions
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
all versions
Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers