phpBugTracker suffers from multiple cross-site scripting vulns. The issue is triggered when input passed via the ‘form’ parameter to the ‘query.php’ script is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site. ‘query.php’ and ‘newaccount.php’ are also vulnerable because they fail to perform filtering when using the REQUEST_URI variable.