275 matches found
CVE-2009-4069: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-4070: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2009-3303: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter...
Debian Security Advisory DSA 1937-1 (gforge)
The remote host is missing an update to gforge announced via advisory DSA 1937-1. OpenVAS Vulnerability Test $Id: deb19371.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1937-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1937-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1937-1] New gforge packages fix cross-site scripting
------------------------------------------------------------------------ Debian Security Advisory DSA-1937-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 21, 2009 http://www.debian.org/security/faq -...
DSA-1937-1 gforge - cross-site scripting
Bulletin has no description...
Debian Security Advisory DSA 1818-1 (gforge)
The remote host is missing an update to gforge announced via advisory DSA 1818-1. OpenVAS Vulnerability Test $Id: deb18181.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1818-1 gforge Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian: Security Advisory (DSA-1818-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 1818-1] New gforge packages fix insufficient input sanitising
------------------------------------------------------------------------ Debian Security Advisory DSA-1818-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 18, 2009 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1818-1] New gforge packages fix insufficient input sanitising
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1818-1 [email protected] http://www.debian.org/security/ Steffen Joeris June 18, 2009 http://www.debian.org/security/faq -...
Debian DSA-1818-1 : gforge - insufficient input sanitising
Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...
DSA-1818-1 gforge - insufficient input sanitising
Bulletin has no description...
GForge Multiple SQL Injection Vulnerabilities
GForge is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
GForge Multiple SQLi Vulnerabilities (Mar 2009) - Active Check
GForge is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
GForge多个SQL注入漏洞
BUGTRAQ ID: 31674 CVECAN ID: CVE-2008-6187,CVE-2008-6188,CVE-2008-6189 GForge是用于管理软件开发周期的工具。 GForge的new/index.php、news/index.php和top/topusers.php文件没有正确地过滤offset输入参数： function dbquery$qstring,$limit='-1',$offset=0 global $QUERYCOUNT; $QUERYCOUNT++; if $limit 0 if !$offset || $offset 0 $offset=0;...
Sql injection
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the releaseid parameter...
Sql injection
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...
CVE-2008-6189
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to 1 new/index.php, 2 news/index.php, and 3 top/topusers.php, which is not properly handled in database-pgsql.php...