Secunia

JeiAr has reported some vulnerabilities in phpBugTracker, allowing malicious people to conduct SQL injection, Cross Site Scripting and script insertion attacks.

1) Certain input passed to the scripts "user.php", "bug.php", and "query.php" isn't properly verified before it is used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

This can also be exploited to execute arbitrary HTML or script code in a user's browser session in context of an affected site by tricking the user into visiting a malicious website or follow a specially crafted link.

2) Bug report entries aren't properly verified before they are stored. The entries can contain references to administrative functions, which will be executed when an administrative user reads a bug report.

This has been reported to affect phpBugTracker 0.9.1. Prior versions may also be affected.

Solution
Edit the source code to ensure that input is properly verified.
Further details available in Customer Area

Provided and/or discovered by
JeiAr of the GulfTech Security Research Team

Deep Links
Links available in Customer Area