Trac

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:edgewall_software:trac:0.50.9:*:*:*:*:*:*:*

part: a version: 0.50.9 update: *

VendorEdgewall Software (172a4250-ad58-53ba-8c19-3896b1ce215d)
ProductTrac (3578c37f-7bd4-526d-86de-3375f3ec3455)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/edgewall/trac purl2cpe 2026-06-01 10:12:32.569500
pkg:pypi/trac purl2cpe 2026-06-01 10:12:32.569502

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3328 vulnerable 2026-06-08 04:50:34.136560 Details available
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Published: 2008-07-27T22:00:00.000Z
Updated: 2024-08-07T09:37:26.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5878 vulnerable 2026-06-08 04:49:21.584491 Details available
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Published: 2006-11-14T19:00:00.000Z
Updated: 2024-08-07T20:04:55.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3980 vulnerable 2026-06-08 04:48:42.784594 Details available
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
Published: 2005-12-04T11:00:00.000Z
Updated: 2024-08-07T23:31:48.901Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.