VULNERABILITY INTELLIGENCE

CVE-2008-0336

CVSS score4.3 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2008-01-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references