CVE-2008-0336: Bugtracker.net

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other administrative tasks via unspecified vectors, possibly related to delete_*.aspx pages, and massedit.aspx, subscribe.aspx, flag.aspx, and relationships.aspx.

Affected products

• Bugtracker.net Bugtracker.net: up to and including 2.7.1

Published 2008-01-17. Last modified 2026-06-16.