Skip to content
Noroxi

gforge records

22 published records for vendor gforge.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
72.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2007-2298
    31Monitor

    Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a

    HighCVSS 7.5Proof of conceptEPSS 2%

    gforge · garennesApr 26, 2007

  • CVE-2008-6189
    31Monitor

    SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/i

    HighCVSS 7.5Proof of conceptEPSS 2%

    gforge · gforgeFeb 19, 2009

  • CVE-2008-0173
    31Monitor

    SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameter

    HighCVSS 7.5No exploitEPSS 2%

    gforge · gforgeJan 15, 2008

  • CVE-2007-3913
    31Monitor

    SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    HighCVSS 7.5Proof of conceptEPSS 2%

    gforge · gforgeSep 6, 2007

  • CVE-2009-4070
    31Monitor

    SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands v

    HighCVSS 7.5No exploitEPSS 2%

    gforge · gforgeNov 24, 2009

  • CVE-2008-2381
    30Monitor

    SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to

    HighCVSS 7.5No exploitEPSS 2%

    gforge · gforgeJan 2, 2009

  • CVE-2008-6188
    30Monitor

    SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL command

    HighCVSS 7.5Proof of conceptEPSS 1%

    gforge · gforgeFeb 19, 2009

  • CVE-2008-6187
    30Monitor

    SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via

    HighCVSS 7.5Proof of conceptEPSS 1%

    gforge · gforgeFeb 19, 2009

  • CVE-2007-0176
    28Monitor

    Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows remote attackers to inject arbitrary web scri

    MediumCVSS 6.8No exploitEPSS 2%

    gforge · gforgeJan 10, 2007

  • CVE-2007-0246
    28Monitor

    plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execu

    MediumCVSS 6.8No exploitEPSS 2%

    gforge · gforgeMay 29, 2007

  • CVE-2007-4966
    27Monitor

    SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL comma

    MediumCVSS 6.8Proof of conceptEPSS 1%

    gforge · gforgeSep 18, 2007

  • CVE-2005-1752
    26Monitor

    viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the

    MediumCVSS 6.4Proof of conceptEPSS 4%

    gforge · gforgeDec 31, 2005

  • CVE-2019-10016
    24Monitor

    GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.

    MediumCVSS 6.1No exploitEPSS 1%

    gforge · advanced serverMar 24, 2019

  • CVE-2005-0299
    21Monitor

    Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a ..

    MediumCVSS 5.0No exploitEPSS 2%

    gforge · gforgeMay 2, 2005

  • CVE-2005-2431
    20Monitor

    The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail

    MediumCVSS 5.0No exploitEPSS 1%

    gforge · gforgeAug 3, 2005

  • CVE-2005-2430
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1)

    MediumCVSS 4.3No exploitEPSS 3%

    gforge · gforgeAug 3, 2005

  • CVE-2009-4069
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject ar

    MediumCVSS 4.3No exploitEPSS 2%

    gforge · gforgeNov 24, 2009

  • CVE-2009-3303
    18Monitor

    Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbi

    MediumCVSS 4.3No exploitEPSS 2%

    gforge · gforgeNov 24, 2009

  • CVE-2008-0167
    18Monitor

    The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then wr

    MediumCVSS 4.6Proof of conceptEPSS 1%

    gforge · gforgeMay 18, 2008

  • CVE-2007-3918
    17Monitor

    Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTM

    MediumCVSS 4.3No exploitEPSS 1%

    gforge · gforgeOct 5, 2007

  • CVE-2009-3304
    13Monitor

    GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' ho

    LowCVSS 3.3No exploitEPSS 0%

    gforge · gforgeDec 4, 2009

  • CVE-2007-3921
    13Monitor

    gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.

    LowCVSS 3.3No exploitEPSS 0%

    gforge · gforgeNov 8, 2007