250 matches found
EUVD-2008-6157
Malware in sbrugna...
EUVD-2008-2376
Malware in sbrugna...
EUVD-2007-3897
Malware in sbrugna...
CVE-2019-10016
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...
CVE-2009-3304
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorizedkeys files in users' home directories, related to deb-specific/sshdumpupdate.pl and cronjobs/cvs-cron/sshcreate.php...
CVE-2009-3303
Cross-site scripting XSS vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter...
CVE-2019-10016
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...
Cross site scripting
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...
CVE-2019-10016
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...
CVE-2019-10016
CVE-2019-10016 affects GForge Advanced Server 6.4.4. The vulnerability is a cross-site scripting (XSS) flaw in the commonsearch.php code path, caused by inadequate filtering of user-submitted HTML in the words parameter. An attacker can remotely exploit the flaw by supplying crafted input via the...
CVE-2019-10016
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring...
GForge Advanced Server Cross-Site Scripting Vulnerability
GForge Group GForge Advanced Server is a suite of team collaboration and project management software from GForge Group. The software provides project hosting, version control, code review, release management, continuous integration and messaging. A cross-site scripting vulnerability exists in...
Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability
No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...
GForge 3.x Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13716/info GForge is affected by a remote command execution vulnerability. This issue arises because the application fails to sanitize user-supplied data passed through URI parameters. An attacker can supply arbitrary she...
GForge 3.1/4.5/4.6 Verify.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25923/info GForge is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. A fix is available from the vendor. Exploiting this issue could allow an attacker to steal...
Gforge <= 4.5.19 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Gforge = 4.5.19 Multiple Sql Injections Vendor Notified: 2008-10-06 Note: should work regardless magicquotesgpc setting. http://gforgesite.xxx/new/?groupid=&limit=50&offset=50;select 1 as id,CURRENTUSER as forumid, version as summary...
GForge < 4.6b2 (skill_delete) Remote SQL Injection Vulnerability
No description provided by source. Sql Injection Vulnerability In GForge Portcullis Security Advisory 07-014 Vulnerable System: All current versions till 4.6b2 Vulnerability Title: Sql Injection Vulnerability Discovery and Development: Portcullis Security Testing Services. Credit for Discovery:...
CVE-2012-1061
SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Sql injection
SQL injection vulnerability in GForge Advanced Server 6.0.0 and other versions before 6.0.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
