Approved changes feed: RSS · Atom

cpe:2.3:a:phpbugtracker_project:phpbugtracker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpbugtracker Project (35e552b9-3663-5617-93dd-ee26e3206e24)
ProductPhpbugtracker (75487655-a350-5c37-b5b7-5ecf371b3faa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/a-v-k/phpbugtracker purl2cpe 2026-06-01 10:16:16.649014
pkg:sourceforge/phpbt purl2cpe 2026-06-01 10:16:16.649017

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-2148 vulnerable 2026-06-08 05:06:27.527511 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Published: 2017-10-06T22:00:00.000Z
Updated: 2024-08-06T05:02:43.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2147 vulnerable 2026-06-08 05:06:27.527235 Details available
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters.
Published: 2017-10-06T22:00:00.000Z
Updated: 2024-08-06T05:02:43.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2146 vulnerable 2026-06-08 05:06:27.526931 Details available
Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to project.php, the (2) group_id parameter to group.php, the (3) status_id parameter to status.php, the (4) resolution_id parameter to resolution.php, the (5) severity_id parameter to severity.php, the (6) priority_id parameter to priority.php, the (7) os_id parameter to os.php, or the (8) site_id parameter to site.php.
Published: 2017-10-06T22:00:00.000Z
Updated: 2024-08-06T05:02:43.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2145 vulnerable 2026-06-08 05:06:27.526626 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Published: 2017-10-06T22:00:00.000Z
Updated: 2024-08-06T05:02:43.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2144 vulnerable 2026-06-08 05:06:27.526323 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) project name parameter to project.php; the (2) use_js parameter to user.php; the (3) use_js parameter to group.php; the (4) Description parameter to status.php; the (5) Description parameter to severity.php; the (6) Regex parameter to os.php; or the (7) Name parameter to database.php.
Published: 2017-10-06T22:00:00.000Z
Updated: 2024-08-06T05:02:43.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2143 vulnerable 2026-06-08 05:06:27.525978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2142 vulnerable 2026-06-08 05:06:27.525567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.