Gentoo Linux Security Advisory GLSA 200506-21 – Stefan Esser of the Hardened-PHP project discovered that Trac fails to validate the id parameter when uploading attachments to the wiki or the bug tracking system. Versions less than 0.8.4 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38233/glsa-200506-21.txt
Source: https://packetstormsecurity.com/files/38233/Gentoo-Linux-Security-Advisory-200506-21.html