CVE-2008-0173

SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports...

[SECURITY] [DSA 1459-1] New gforge packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1459-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2008 http://www.debian.org/security/faq -...

Debian DSA-1459-1 : gforge - insufficient input validation

It was discovered that Gforge, a collaborative development tool, did not properly sanitise some CGI parameters, allowing SQL injection in scripts related to RSS exports. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

[SECURITY] [DSA 1459-1] New gforge packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1459-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2008 http://www.debian.org/security/faq -...

DSA-1459-1 gforge - SQL injection

Bulletin has no description...

CVE-2007-3921

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

CVE-2007-3921

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

Code injection

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

CVE-2007-3921

CVE-2007-3921 affects gforge (Debian packages gforge 3.1 and 4.5.14) where insecure handling of temporary files enables local users to truncate arbitrary files via a symlink attack. The Debian security advisory DSA-1402-1 documents the vulnerability and fixes, with updated packages for etch (4.5....

CVE-2007-3921

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

Debian DSA-1402-1 : gforge - insecure temporary files

Steve Kemp from the Debian Security Audit project discovered that gforge, a collaborative development tool, used temporary files insecurely which could allow local users to truncate files upon the system with the privileges of the gforge user, or create a denial of service attack. %NASLMINLEVEL...

DSA-1402-1 gforge - insecure temporary files

Bulletin has no description...

[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1402-1 [email protected] http://www.debian.org/security/ Steve Kemp November 07, 2007 http://www.debian.org/security/faq -...

Debian DSA-1383-1 : gforge - XSS

It was discovered that a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

GForge account/verify.php confirm_hash Parameter XSS

The remote host is running GForge, a web-based project for collaborative software development. The version of GForge installed on the remote host fails to sanitize user-supplied input to the 'confirmhash' parameter of the 'account/verify.php' script before using it to generate dynamic output. An...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

Cross-site scripting XSS vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirmhash parameter...

CVE-2007-3918

CVE-2007-3918 describes a cross-site scripting (XSS) vulnerability in GForge 4.6b2, specifically in account/verify.php via the confirm_hash parameter. An unauthenticated attacker could cause arbitrary HTML/script to be executed in a user’s browser. Public references from Debian DSA-1383-1 indicat...