Skip to content

CVE-2008-2381

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in...

7.5 HighFix available

CVE-2008-2381 is a high vulnerability (CVSS 7.5) in Gforge, published January 2, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.61%, the 75th percentile. Fixed in gforge 4.5.14-22etch10.

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Exploit likelihood

1.61%Down 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Record: CVE-2008-2381
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Record: CVE-2008-2381
Updated: 2026-11-02

EUVDEUVD-2008-2376 No score

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Record: EUVD-2008-2376
Updated: 2026-11-03

GitHub AdvisoriesGHSA-w84p-rw5x-5fr9 No score

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in...

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Record: GHSA-w84p-rw5x-5fr9
Weakness: CWE-89
Updated: 2026-11-02

Affected products

gforge

Affected packages

Affected packages
Package	Affected	Fixed
`gforge` Debian:4.0	before 4.5.14-22etch10, plus listed versions 4.5.14-224.5.14-22etch14.5.14-22etch24.5.14-22etch34.5.14-22etch4 Show 5 moreShow less 4.5.14-22etch54.5.14-22etch64.5.14-22etch74.5.14-22etch84.5.14-22etch9	4.5.14-22etch10

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less