251 matches found
CVE-2007-3918
Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...
[SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 1383-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 4th, 2007 http://www.debian.org/security/faq -...
GForge 4.6/4.5/3.1 - 'Verify.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25923/info GForge is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A fix is available from the vendor. Exploiting this issue could allow an attacker to steal cookie-based authentication...
GForge 4.64.53.1 - Verify.php Cross-Site Scripting
GForge 4.64.53.1 - Verify.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25923/info GForge is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A fix is available from the vendor. Exploiting this issue could allow an...
DSA-1383-1 gforge - cross-site scripting
Bulletin has no description...
DTSA-59-1 gforge - cross site scripting vulnerability in account/verify.php
Bulletin has no description...
Sql injection
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...
CVE-2007-4966
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...
CVE-2007-4966
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...
CVE-2007-4966
CVE-2007-4966 affects GForge 4.6b2 and earlier. The flaw is a SQL injection in www/people/editprofile.php via the skill_delete[] parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impacts include potential data exposure and modification; CVSS v2 base score 6.8 (MED...
Debian DSA-1369-1 : gforge - missing input sanitising
Sumit I. Siddharth discovered that Gforge, a collaborative development tool performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
GForge 4.6b2 - skill_delete SQL Injection
GForge 4.6b2 - skilldelete SQL Injection Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for...
GForge < 4.6b2 (skill_delete) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ GForge 4.6b2 skilldelete Remote SQL Injection Vulnerability ================================================================ Sql Injection Vulnerability In GForge Portcullis...
GForge < 4.6b2 - 'skill_delete' SQL Injection
Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for Discovery: Summit Siddharth - Portcullis Comput...
GForge < 4.6b2 (skill_delete) Remote SQL Injection Vulnerability
No description provided by source. Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for Discovery:...
DTSA-57-1 gforge - sql injection
Bulletin has no description...
CVE-2007-3913
SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...