CVE-2015-2144

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.63%

Published

Oct 6, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description parameter to status.php; the (5) Description parameter to severity.php; the (6) Regex parameter to os.php; or the (7) Name parameter to database.php.

Weaknesses (CWE)

CWE-79

Affected Products (1)

phpbugtracker_project · phpbugtrackervulnerable

References (4)

http://www.openwall.com/lists/oss-security/2015/02/28/1

Mailing ListThird Party Advisory

https://github.com/a-v-k/phpBugTracker/issues/4

Third Party Advisory

http://www.openwall.com/lists/oss-security/2015/02/28/1

Mailing ListThird Party Advisory

https://github.com/a-v-k/phpBugTracker/issues/4

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs