2 matches found
CVE-2008-6188: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skilledit parameter...
7.5CVSS6.4AI score0.01314EPSS
SaveExploits3References2
CVE-2007-4966: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skilldelete parameter...
6.8CVSS6.4AI score0.01458EPSS
SaveExploits1References2
20