Unrated severityNVD Advisory· Published Dec 2, 2010· Updated Apr 29, 2026
CVE-2010-3267
CVE-2010-3267
Description
Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these details are obtained from third party information.
Affected products
85cpe:2.3:a:ifdefined:bugtracker.net:2.7.3:*:*:*:*:*:*:*+ 84 more
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.3.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:*:*:*:*:*:*:*:*range: <=3.4.4
- cpe:2.3:a:ifdefined:bugtracker.net:0.91:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.5.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.8.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:2.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:ifdefined:bugtracker.net:3.4.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.exploit-db.com/exploits/15653nvdExploit
- secunia.com/advisories/42418nvdVendor Advisory
- btnet.svn.sourceforge.net/viewvc/btnet/RELEASE_NOTES.TXTnvd
- www.coresecurity.com/content/multiple-vulnerabilities-in-bugtrackernvd
- www.securityfocus.com/archive/1/514957/100/0/threadednvd
- www.securityfocus.com/bid/45121nvd
News mentions
0No linked articles in our index yet.