GCVE - cpe:2.3:a:flyspray:flyspray:0.9.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:flyspray:flyspray:0.9.7:*:*:*:*:*:*:*

part: a version: 0.9.7 update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/flyspray/flyspray`	purl2cpe	2026-06-01 10:16:13.326109
`pkg:sourceforge/flyspray`	purl2cpe	2026-06-01 10:16:13.326112

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0714`	vulnerable	2026-06-08 04:48:55.032801	Details available Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:48:55.251Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/424902/100/0/threaded http://www.vupen.com/english/advisories/2006/0569 http://securityreason.com/securityalert/432 http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html http://www.securityfocus.com/bid/16618	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3334`	vulnerable	2026-06-08 04:48:40.381853	Details available Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) string, (4) type, (5) serv, (6) due, (7) dev, and (8) sort2 parameters. Published: 2005-10-27T04:00:00.000Z Updated: 2024-08-07T23:10:08.302Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/22889 http://flyspray.rocks.cc/bts/task/703 http://www.securityfocus.com/bid/15209 http://secunia.com/advisories/18606 http://www.debian.org/security/2006/dsa-953	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.