CVE-2005-3980

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-04 · updated 2026-06-16

Description

SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.

Affected products

Edgewall Software Trac: 0.5.1, 0.5.2, 0.6, 0.6.1, 0.7, 0.7.1 (+9)

References

http://projects.edgewall.com/trac/wiki/ChangeLog
http://secunia.com/advisories/17836/
http://securitytracker.com/id?1015302
http://www.osvdb.org/21386
http://www.securityfocus.com/archive/1/418294/100/0/threaded
http://www.securityfocus.com/bid/15676/
http://www.vupen.com/english/advisories/2005/2701
https://exchange.xforce.ibmcloud.com/vulnerabilities/23461
http://projects.edgewall.com/trac/wiki/ChangeLog
http://secunia.com/advisories/17836/
http://securitytracker.com/id?1015302
http://www.osvdb.org/21386

Get alerted when CVE-2005-3980 or the next vulnerability affects your stack