4 matches found
CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
Sql injection
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...
CVE-2008-0173
CVE-2008-0173 affects Gforge, with SQL injection in scripts related to RSS exports due to insufficient input validation in CGI parameters. Affected versions include 4.6.99 and earlier. Remote attackers could potentially execute arbitrary SQL commands via those parameters. Debian (DSA-1459-1) and ...
DSA-1383-1 gforge - cross-site scripting
Bulletin has no description...