CVE-2007-3921

CVE-2007-3921 affects gforge (Debian packages gforge 3.1 and 4.5.14) where insecure handling of temporary files enables local users to truncate arbitrary files via a symlink attack. The Debian security advisory DSA-1402-1 documents the vulnerability and fixes, with updated packages for etch (4.5....

CVE-2007-3921

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

Debian DSA-1402-1 : gforge - insecure temporary files

Steve Kemp from the Debian Security Audit project discovered that gforge, a collaborative development tool, used temporary files insecurely which could allow local users to truncate files upon the system with the privileges of the gforge user, or create a denial of service attack. %NASLMINLEVEL...

CVE-2007-3921: Improper Link Resolution Before File Access

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1402-1 [email protected] http://www.debian.org/security/ Steve Kemp November 07, 2007 http://www.debian.org/security/faq -...

Debian DSA-1383-1 : gforge - XSS

It was discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

GForge account/verify.php confirm_hash Parameter XSS

The remote host is running GForge, a web-based project for collaborative software development. The version of GForge installed on the remote host fails to sanitize user-supplied input to the 'confirmhash' parameter of the 'account/verify.php' script before using it to generate dynamic output. An...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

CVE-2007-3918 describes a cross-site scripting (XSS) vulnerability in GForge 4.6b2, specifically in account/verify.php via the confirm_hash parameter. An unauthenticated attacker could cause arbitrary HTML/script to be executed in a user’s browser. Public references from Debian DSA-1383-1 indicat...

CVE-2007-3918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

[SECURITY] [DSA 1383-1] New gforge packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 1383-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 4th, 2007 http://www.debian.org/security/faq -...

GForge 4.6/4.5/3.1 - 'Verify.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25923/info GForge is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A fix is available from the vendor. Exploiting this issue could allow an attacker to steal cookie-based authentication...

GForge 4.64.53.1 - Verify.php Cross-Site Scripting

GForge 4.64.53.1 - Verify.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25923/info GForge is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A fix is available from the vendor. Exploiting this issue could allow an...

DSA-1383-1 gforge - cross-site scripting

Bulletin has no description...

DTSA-59-1 gforge - cross site scripting vulnerability in account/verify.php

Bulletin has no description...

Sql injection

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...