EUVD-2007-4947

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

CVE-2007-3918 describes a cross-site scripting (XSS) vulnerability in GForge 4.6b2, specifically in account/verify.php via the confirm_hash parameter. An unauthenticated attacker could cause arbitrary HTML/script to be executed in a user’s browser. Public references from Debian DSA-1383-1 indicat...