Skip to content
OpenAdvisories
Unscored DSA-1698-1 4 CVEs

gforge - SQL injection

Published Jan 9, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 gforge 4.5.14-22etch10

Vulnerabilities 4

  • Unscored —
    CVE-2008-2381

    SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allow…

  • Unscored —
    CVE-2008-6187 Public exploit

    SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2008-6188 Public exploit

    SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2008-6189 Public exploit

    SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset p…