CVE-2007-4966

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...

CVE-2007-4966

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...

CVE-2007-4966

CVE-2007-4966 affects GForge 4.6b2 and earlier. The flaw is a SQL injection in www/people/editprofile.php via the skill_delete[] parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impacts include potential data exposure and modification; CVSS v2 base score 6.8 (MED...

CVE-2007-4966: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...

Debian DSA-1369-1 : gforge - missing input sanitising

Sumit I. Siddharth discovered that Gforge, a collaborative development tool performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

GForge 4.6b2 - skill_delete SQL Injection

GForge 4.6b2 - skilldelete SQL Injection Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for...

GForge < 4.6b2 (skill_delete) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ GForge 4.6b2 skilldelete Remote SQL Injection Vulnerability ================================================================ Sql Injection Vulnerability In GForge Portcullis...

GForge < 4.6b2 - 'skill_delete' SQL Injection

Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for Discovery: Summit Siddharth - Portcullis Comput...

GForge &lt; 4.6b2 (skill_delete) Remote SQL Injection Vulnerability

No description provided by source. Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for Discovery:...

DTSA-57-1 gforge - sql injection

Bulletin has no description...

CVE-2007-3913

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3913

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3913

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3913

CVE-2007-3913 is an SQL injection vulnerability in Gforge prior to version 3.1. The issue arises from insufficient input sanitising, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Public documentation confirms affected versions and Debian/OpenVAS advisories. ...

[SECURITY] [DSA 1369-1] New gforge packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 1369-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 6th, 2007 http://www.debian.org/security/faq -...

CVE-2007-3913: Improper Input Validation

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

DSA-1369-1 gforge - SQL injection

Bulletin has no description...

Code injection

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATHINFO...

CVE-2007-0246

plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATHINFO...