SQL Injection in gogs.io/gogs

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs aka Go Git Service 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues...

CVE-2014-8681

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs aka Go Git Service 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues...

CVE-2014-8681: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the GetIssues function in models/issue.go in Gogs aka Go Git Service 0.3.1-9 through 0.5.6.x before 0.5.6.1025 Beta allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues...

PT-2014-8681

Name of the Vulnerable Software and Affected Versions Gogs aka Go Git Service versions 0.3.1-9 through 0.5.6.x Description The issue is related to a SQL injection vulnerability. It allows remote attackers to execute arbitrary SQL commands via the label parameter to user/repos/issues. The...