CVE-2006-5878

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

Affected Products (23)

edgewall_software · tracvulnerable

References (18)

http://secunia.com/advisories/22789

http://secunia.com/advisories/22868

http://secunia.com/advisories/23357

http://security.gentoo.org/glsa/glsa-200612-14.xml

http://trac.edgewall.org/ticket/4049

http://trac.edgewall.org/wiki/ChangeLog

Patch

http://www.debian.org/security/2006/dsa-1209

Patch

http://www.vupen.com/english/advisories/2006/4422

https://exchange.xforce.ibmcloud.com/vulnerabilities/30146

http://secunia.com/advisories/22789

http://secunia.com/advisories/22868

http://secunia.com/advisories/23357

http://security.gentoo.org/glsa/glsa-200612-14.xml

http://trac.edgewall.org/ticket/4049

http://trac.edgewall.org/wiki/ChangeLog

Patch

http://www.debian.org/security/2006/dsa-1209

Patch

http://www.vupen.com/english/advisories/2006/4422

https://exchange.xforce.ibmcloud.com/vulnerabilities/30146