EUVD-2012-1098

Malware in sbrugna...

EUVD-2019-2080

Malware in sbrugna...

CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

Cross site scripting

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2019-10016

CVE-2019-10016 affects GForge Advanced Server 6.4.4. The vulnerability is a cross-site scripting (XSS) flaw in the commonsearch.php code path, caused by inadequate filtering of user-submitted HTML in the words parameter. An attacker can remotely exploit the flaw by supplying crafted input via the...

GForge Advanced Server Cross-Site Scripting Vulnerability

GForge Group GForge Advanced Server is a suite of team collaboration and project management software from GForge Group. The software provides project hosting, version control, code review, release management, continuous integration and messaging. A cross-site scripting vulnerability exists in...

PT-2019-11288

Name of the Vulnerable Software and Affected Versions: GForge Advanced Server version 6.4.4 Description: The issue allows for XSS via the words parameter in the commonsearch.php file. This can be demonstrated by a snippet/search/?words= substring. Recommendations: For GForge Advanced Server versi...

CVE-2019-10016: Improper Neutralization of Input During Web Page Generation

GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...

CVE-2012-1061

SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1061

SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

PT-2012-3050

Name of the Vulnerable Software and Affected Versions GForge Advanced Server versions prior to 6.0.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 6.0.1, update to version 6.0.1 or later to resolve the issue...

CVE-2012-1061: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1061

CVE-2012-1061 affects GForge Advanced Server 6.0.0 and all versions before 6.0.1. The issue is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Exploit details, affected subcomponents, and concrete impact are not provided in the...