ID CVE-2005-2430
Summary Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.
References
Vulnerable Configurations
  • cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:gforge:gforge:4.5:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 14405
bugtraq 20050727 Cross Site Scripting vulnerabilities in GForge
debian DSA-1094
osvdb
  • 18299
  • 18300
  • 18301
  • 18302
  • 18303
  • 18304
secunia
  • 16253
  • 20622
xf gforge-multiple-xss(21558)
Last major update 11-07-2017 - 01:32
Published 03-08-2005 - 04:00
Back to Top