Traq vulnerabilities

Products

• Traq 2

Newest

• traq Traq 3.7.1 allows admin/users/new CSRF to create an admin account (aka group_id=1). CVE-2018-20780 8.8 HighFebruary 11, 2019
• traq Traq 3.7.1 allows SQL Injection via a tickets?search= URI. CVE-2018-20779 9.8 CriticalFebruary 11, 2019