İçeriğe atla
Noroxi

gforge kayıtları

gforge üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%72,7
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2007-2298
    31İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gforge · garennes26 Nis 2007

  • CVE-2008-6189
    31İzleyin

    SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/i

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gforge · gforge19 Şub 2009

  • CVE-2008-0173
    31İzleyin

    SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameter

    YüksekCVSS 7,5İstismar yokEPSS %2

    gforge · gforge15 Oca 2008

  • CVE-2007-3913
    31İzleyin

    SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    gforge · gforge6 Eyl 2007

  • CVE-2009-4070
    31İzleyin

    SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands v

    YüksekCVSS 7,5İstismar yokEPSS %2

    gforge · gforge24 Kas 2009

  • CVE-2008-2381
    30İzleyin

    SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to

    YüksekCVSS 7,5İstismar yokEPSS %2

    gforge · gforge2 Oca 2009

  • CVE-2008-6188
    30İzleyin

    SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL command

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    gforge · gforge19 Şub 2009

  • CVE-2008-6187
    30İzleyin

    SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    gforge · gforge19 Şub 2009

  • CVE-2007-0176
    28İzleyin

    Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows remote attackers to inject arbitrary web scri

    OrtaCVSS 6,8İstismar yokEPSS %2

    gforge · gforge10 Oca 2007

  • CVE-2007-0246
    28İzleyin

    plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execu

    OrtaCVSS 6,8İstismar yokEPSS %2

    gforge · gforge29 May 2007

  • CVE-2007-4966
    27İzleyin

    SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL comma

    OrtaCVSS 6,8Kavram kanıtıEPSS %1

    gforge · gforge18 Eyl 2007

  • CVE-2005-1752
    26İzleyin

    viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the

    OrtaCVSS 6,4Kavram kanıtıEPSS %4

    gforge · gforge31 Ara 2005

  • CVE-2019-10016
    24İzleyin

    GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.

    OrtaCVSS 6,1İstismar yokEPSS %1

    gforge · advanced server24 Mar 2019

  • CVE-2005-0299
    21İzleyin

    Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a ..

    OrtaCVSS 5,0İstismar yokEPSS %2

    gforge · gforge2 May 2005

  • CVE-2005-2431
    20İzleyin

    The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail

    OrtaCVSS 5,0İstismar yokEPSS %1

    gforge · gforge3 Ağu 2005

  • CVE-2005-2430
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1)

    OrtaCVSS 4,3İstismar yokEPSS %3

    gforge · gforge3 Ağu 2005

  • CVE-2009-4069
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject ar

    OrtaCVSS 4,3İstismar yokEPSS %2

    gforge · gforge24 Kas 2009

  • CVE-2009-3303
    18İzleyin

    Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbi

    OrtaCVSS 4,3İstismar yokEPSS %2

    gforge · gforge24 Kas 2009

  • CVE-2008-0167
    18İzleyin

    The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then wr

    OrtaCVSS 4,6Kavram kanıtıEPSS %1

    gforge · gforge18 May 2008

  • CVE-2007-3918
    17İzleyin

    Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTM

    OrtaCVSS 4,3İstismar yokEPSS %1

    gforge · gforge5 Eki 2007

  • CVE-2009-3304
    13İzleyin

    GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' ho

    DüşükCVSS 3,3İstismar yokEPSS %0

    gforge · gforge4 Ara 2009

  • CVE-2007-3921
    13İzleyin

    gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.

    DüşükCVSS 3,3İstismar yokEPSS %0

    gforge · gforge8 Kas 2007