Filtered by vendor Traq Subscriptions
Filtered by product Traq Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2011-10013 1 Traq 1 Traq 2025-08-16 N/A
Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script. The flawed authorization logic fails to halt execution after a failed access check, allowing unauthenticated users to reach admin-only functionality. This can be exploited via plugins.php to inject and execute arbitrary PHP code.
CVE-2018-20780 1 Traq 1 Traq 2024-11-21 N/A
Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1).
CVE-2018-20779 1 Traq 1 Traq 2024-11-21 N/A
Traq 3.7.1 allows SQL Injection via a tickets?search= URI.