Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gforge gforge 4.5.14 vulnerabilities and exploits

(subscribe to this query)
3.3
CVSSv2
CVE-2009-3304
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' home directories, related to deb-specific/ssh_dump_update.pl and cronjobs/cvs-cron/ssh_create.php.
Gforge Gforge 4.5.14Gforge Gforge 4.8.2Gforge Gforge 4.7
4.3
CVSSv2
CVE-2009-3303
Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote malicious users to inject arbitrary web script or HTML via the helpname parameter.
Gforge Gforge 4.7Gforge Gforge 4.5.14Gforge Gforge 4.8.1
3.3
CVSSv2
CVE-2007-3921
gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.
Gforge Gforge 3.1Gforge Gforge 4.5.14
4.3
CVSSv2
CVE-2009-4069
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Gforge Gforge 4.5.14Gforge Gforge 4.7.3
7.5
CVSSv2
CVE-2009-4070
SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote malicious users to execute arbitrary SQL commands via unknown vectors.
Gforge Gforge 4.7.3Gforge Gforge 4.5.14
4.6
CVSSv2
CVE-2008-0167
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow malicious users to bypass intended access restrictions or have unspecified other impact in opportunistic c...
Gforge Gforge 4.5.14
7.5
CVSSv2
CVE-2008-6187
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and previous versions allows remote malicious users to execute arbitrary SQL commands via the release_id parameter.
Gforge Gforge 3.2Gforge Gforge 3.1Gforge Gforge 4.5.11Gforge Gforge 4.5Gforge Gforge 4.5.16Gforge Gforge 4.5.14Gforge Gforge 3.0Gforge GforgeGforge Gforge 3.3Gforge Gforge 3.21
7.5
CVSSv2
CVE-2008-6188
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and previous versions allows remote malicious users to execute arbitrary SQL commands via the skill_edit[] parameter.
Gforge Gforge 4.6 B2Gforge Gforge 4.5.16Gforge Gforge 4.5.19Gforge GforgeGforge Gforge 3.0Gforge Gforge 3.21Gforge Gforge 3.3Gforge Gforge 3.1Gforge Gforge 3.2Gforge Gforge 4.5Gforge Gforge 4.5.11Gforge Gforge 4.5.14Gforge Gforge 4.6
6.8
CVSSv2
CVE-2007-0246
plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 prior to 20070524, aka gforge-plugin-scmcvs, allows remote malicious users to execute arbitrary commands via shell metacharacters in the PATH_INFO.
Gforge Gforge
7.5
CVSSv2
CVE-2007-3913
SQL injection vulnerability in Gforge prior to 3.1 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Gforge Gforge
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-29895injectCVE-2023-52689CVE-2024-5049CVE-2024-5051privilege escalationphysicalCVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook