Skip to content
OpenAdvisories
Medium DSA-951-2 2 CVEs

trac - missing input sanitising

Published Jan 23, 2006 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 trac 0.8.1-3sarge4

Vulnerabilities 2

  • Medium 6.1
    CVE-2005-4644

    Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

    trac trac Debian PyPI
  • Unscored —
    CVE-2005-4065 Public exploit

    SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbit…

    trac Debian