Vulnerability Details CVE-2008-0173
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/28395
- http://secunia.com/advisories/28451
- http://www.debian.org/security/2008/dsa-1459
- http://www.securityfocus.com/bid/27266
- http://www.vupen.com/english/advisories/2008/0115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39666
- http://secunia.com/advisories/28395
- http://secunia.com/advisories/28451
- http://www.debian.org/security/2008/dsa-1459
- http://www.securityfocus.com/bid/27266
- http://www.vupen.com/english/advisories/2008/0115
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39666