summaryrefslogtreecommitdiffstats
path: root/data/DTSA/advs/57-gforge.adv
blob: 4b111b82ee27a66cb1b76385683ee38ba76465f7 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
source: gforge
date: September 9, 2007
author: Nico Golde
vuln-type: sql injection
problem-scope: remote
debian-specifc: no
cve: CVE-2007-3913
vendor-advisory:
testing-fix: 4.5.14-23lenny2
sid-fix: 4.6.99+svn6086-1
upgrade: apt-get upgrade

The gforge collaborative development environment is prone
to an SQL injection due to insufficient input sanitizing.

CVE-2007-3913

SQL injection vulnerability in Gforge before 3.1 allows
remote attackers to execute arbitrary SQL commands via
unspecified vectors.

© 2014-2024 Faster IT GmbH | imprint | privacy policy