GCVE - cpe:2.3:a:gforge:gforge:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gforge:gforge:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gforge (`f9dbd182-d28c-5737-abcc-5c6fd39305a2`)
Product	Gforge (`04f7f3b5-c4fd-54d9-82ca-503b496a798f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6188`	vulnerable	2026-06-08 04:50:54.438769	Details available SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_edit[] parameter. Published: 2009-02-19T18:00:00.000Z Updated: 2024-08-07T11:20:25.338Z Open on db.gcve.eu Reference links http://gforge.org/tracker/index.php?func=detail&aid=5554&group_id=1&atid=105 http://secunia.com/advisories/32217 https://exchange.xforce.ibmcloud.com/vulnerabilities/48851 http://www.securityfocus.com/bid/31674 https://www.exploit-db.com/exploits/6708	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6187`	vulnerable	2026-06-08 04:50:54.432615	Details available SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the release_id parameter. Published: 2009-02-19T18:00:00.000Z Updated: 2024-08-07T11:20:25.301Z Open on db.gcve.eu Reference links http://secunia.com/advisories/32217 http://www.securityfocus.com/bid/31674 https://exchange.xforce.ibmcloud.com/vulnerabilities/45811 http://gforge.org/tracker/index.php?func=detail&aid=5553&group_id=1&atid=105 https://www.exploit-db.com/exploits/6707	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0173`	vulnerable	2026-06-08 04:50:10.427735	Details available SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports. Published: 2008-01-15T19:00:00.000Z Updated: 2024-08-07T07:39:32.866Z Open on db.gcve.eu Reference links http://www.debian.org/security/2008/dsa-1459 https://exchange.xforce.ibmcloud.com/vulnerabilities/39666 http://www.securityfocus.com/bid/27266 http://www.vupen.com/english/advisories/2008/0115 http://secunia.com/advisories/28395	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4966`	vulnerable	2026-06-08 04:49:57.547104	Details available SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter. Published: 2007-09-18T22:00:00.000Z Updated: 2024-08-07T15:17:27.756Z Open on db.gcve.eu Reference links http://secunia.com/advisories/26803 http://www.portcullis.co.uk/179.php http://www.securityfocus.com/bid/25665 https://www.exploit-db.com/exploits/4404 http://www.vupen.com/english/advisories/2007/3174	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3913`	vulnerable	2026-06-08 04:49:55.388491	Details available SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Published: 2007-09-06T22:00:00.000Z Updated: 2024-08-07T14:37:06.022Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/25585 https://exchange.xforce.ibmcloud.com/vulnerabilities/36505 http://secunia.com/advisories/26723 http://www.debian.org/security/2007/dsa-1369	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0246`	vulnerable	2026-06-08 04:49:31.765734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.