Gforge vulnerabilities

Products

• Gforge 20

Newest

• gforge advanced server GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated... CVE-2019-10016 6.1 MediumMarch 25, 2019
• gforge GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink... CVE-2009-3304 Fix available 3.3 LowDecember 3, 2009
• gforge Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4... CVE-2009-3303 Fix available 4.3 MediumNovember 21, 2009
• gforge SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote... CVE-2009-4070 Fix available 7.5 HighJune 18, 2009
• gforge Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other... CVE-2009-4069 Fix available 4.3 MediumJune 18, 2009
• gforge SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL... CVE-2008-6189 Public exploitFix available 7.5 HighJanuary 9, 2009
• gforge SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote... CVE-2008-6188 Public exploitFix available 7.5 HighJanuary 9, 2009
• gforge SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote... CVE-2008-6187 Public exploitFix available 7.5 HighJanuary 9, 2009
• gforge SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in... CVE-2008-2381 Fix available 7.5 HighJanuary 2, 2009
• gforge The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by... CVE-2008-0167 Public exploitFix available 4.6 MediumMay 14, 2008
• gforge SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute... CVE-2008-0173 Fix available 7.5 HighJanuary 13, 2008
• gforge gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on... CVE-2007-3921 Fix available 3.3 LowNovember 8, 2007
• gforge Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote... CVE-2007-3918 Fix available 4.3 MediumOctober 4, 2007
• gforge SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows... CVE-2007-4966 Public exploit 6.8 MediumSeptember 18, 2007
• gforge SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL... CVE-2007-3913 Public exploitFix available 7.5 HighSeptember 6, 2007
• gforge plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge... CVE-2007-0246 Fix available 6.8 MediumMay 24, 2007
• gforge garennes Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote... CVE-2007-2298 Public exploit 7.5 HighApril 26, 2007
• gforge Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows... CVE-2007-0176 Fix available 6.8 MediumJanuary 11, 2007
• gforge viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute... CVE-2005-1752 Public exploit 6.4 MediumDecember 31, 2005
• gforge The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit... CVE-2005-2431 5.0 MediumAugust 3, 2005
• gforge Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to... CVE-2005-2430 Fix available 4.3 MediumAugust 3, 2005
• gforge Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list... CVE-2005-0299 5.0 MediumFebruary 10, 2005