Approved changes feed: RSS · Atom

cpe:2.3:a:traq:traq:3.7.1:*:*:*:*:*:*:*

part: a version: 3.7.1 update: *

VendorTraq (89509fe7-de82-58b7-a00a-b7eeaba70acd)
ProductTraq (5c226c5d-ab24-5806-b443-29fcd8108690)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/nirix/traq purl2cpe 2026-06-01 10:13:00.975962
pkg:github/nirix/traq purl2cpe 2026-06-01 10:13:00.975966
pkg:gitlab/nirix/traq purl2cpe 2026-06-01 10:13:00.975970

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20780 vulnerable 2026-06-08 05:11:27.931487 Details available
Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).
Published: 2019-02-11T02:00:00.000Z
Updated: 2024-08-05T12:12:27.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20779 vulnerable 2026-06-08 05:11:27.930978 Details available
Traq 3.7.1 allows SQL Injection via a tickets?search= URI.
Published: 2019-02-11T02:00:00.000Z
Updated: 2024-08-05T12:12:27.699Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.