owaspbwa tickets

来源  https://sourceforge.net/p/owaspbwa/tickets/

192 SQL Injection in pic_id parameter Peruggia High
191 1 AWStats Medium
190 GetBoo reflected XSS in http:/?/?owaspbwa/?getboo/?psearch.php GetBoo Medium
34 CSRF to change password and e-mail CSRF Yazd Medium
33 Lack of access controls Peruggia Medium
32 Reflected XSS Peruggia Medium
31 Local File Inclusion Peruggia Medium
30 SQL Injection Login Bypass Peruggia High
29 Directory Traversal Peruggia Medium
28 INSERT SQL Inection OWASP Vicnum High
27 AppSensor viewProfile lack of access control OWASP AppSensor Demo Application Medium
26 GetBoo Email Forgotten Password SQL injection GetBoo High
25 GetBoo Email Forgotten Password SQL injection GetBoo High
24 GetBoo stored XSS XSS, stored, cross, site, scripting GetBoo Medium
23 Vanilla SQL Injection OWASP Vicnum Medium
22 Remote PHP Injection (CVE-2007-5423) TikiWiki High
21 Cross-site scripting (XSS) vulnerability in tiki-featured_link.php (CVE-2006-5703) XSS TikiWiki Medium
20 Directory traversal in tiki-listmovies.php (CVE-2007-6528) TikiWiki Medium
19 XSS vulnerability in tiki-special_chars.php (CVE-2007-6526) XSS TikiWiki Medium
18 CVE-2008-1047 XSS TikiWiki Medium
15 Reflected XSS in http:/?/?owaspbwa/?yazd/?bay/?account.jsp Yazd Medium
14 Reflected XSS in http:/?/?owaspbwa/?yazd/?bay/?post.jsp Yazd Medium
13 Reflected XSS in http:/?/?owaspbwa/?gtd-php/?editList.php GTD-PHP Medium
12 Reflected XSS in http:/?/?owaspbwa/?gtd-php/?editChecklist.php GTD-PHP Medium
11 Internal Path Disclosure AWStats _Low
10 Open Redirect AWStats _Low
9 Malicious File Execution WordPress High
8 SQL Injection WordPress High
7 SQL Injection WordPress High
6 Command Injection WordPress High
5 Reflected XSS in http:/?/?owaspbwa/?mono/?simple-reflected-xss.aspx Simple ASP.NET Forms Medium
4 Reflected XSS in http:/?/?owaspbwa/?vicnum/?vicnum5.php OWASP Vicnum Medium
3 State Manipulation OWASP Vicnum High
2 Reflected XSS in http:/?/?owaspbwa/?mandiant-struts-form-vulnerable/?submitname.do Mandiant Struts Forms Medium
1 Reflected XSS in http:/?/?owaspbwa/?vicnum/?cgi-bin/?vicnum1.pl