Skip to content
Noroxi

flyspray records

10 published records for vendor flyspray.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
10%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2007-1788
    27Monitor

    Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote attackers to bypass authentication via a crafted po

    MediumCVSS 6.8No exploitEPSS 1%

    flyspray · flysprayMar 31, 2007

  • CVE-2007-1789
    27Monitor

    Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests.

    MediumCVSS 6.8No exploitEPSS 1%

    flyspray · flysprayMar 31, 2007

  • CVE-2012-1058
    24Monitor

    Cross-site request forgery (CSRF) vulnerability in Flyspray 0.9.9.6 allows remote attackers to hijack the authentication of admins for reque

    MediumCVSS 6.0Proof of conceptEPSS 1%

    flyspray · flysprayFeb 13, 2012

  • CVE-2006-0714
    22Monitor

    Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbi

    MediumCVSS 5.0Proof of conceptEPSS 8%

    flyspray · flysprayFeb 15, 2006

  • CVE-2017-15214
    21Monitor

    Stored XSS vulnerability in Flyspray 1.0-rc4 before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileg

    MediumCVSS 5.4No exploitEPSS 1%

    flyspray · flysprayOct 10, 2017

  • CVE-2017-15213
    21Monitor

    Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via

    MediumCVSS 5.4No exploitEPSS 1%

    flyspray · flysprayOct 10, 2017

  • CVE-2008-1166
    20Monitor

    Flyspray 0.9.9.4 generates different error messages depending on whether the username is valid or invalid, which allows remote attackers to

    MediumCVSS 5.0No exploitEPSS 1%

    flyspray · flysprayMar 5, 2008

  • CVE-2005-3334
    18Monitor

    Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary we

    MediumCVSS 4.3Proof of conceptEPSS 5%

    flyspray · flysprayOct 27, 2005

  • CVE-2007-6461
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrar

    MediumCVSS 4.3No exploitEPSS 1%

    flyspray · flysprayDec 19, 2007

  • CVE-2008-1165
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Flyspray 0.9.9 through 0.9.9.4 allow remote attackers to inject arbitrary web script

    MediumCVSS 4.3No exploitEPSS 1%

    flyspray · flysprayMar 5, 2008