Arctic · Arctic Issue Tracker · CVE-2008-3250
Name of the Vulnerable Software and Affected Versions:
Arctic Issue Tracker version 2.0.0
Description:
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `filter` parameter in the "index.php" API endpoint.
Recommendations:
For Arctic Issue Tracker version 2.0.0, consider restricting access to the `filter` parameter in the "index.php" endpoint until a patch is available.