Vulnerabilities (CVE)

Filtered by vendor Gforge Subscribe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1752 1 Gforge 1 Gforge 2025-04-03 6.4 MEDIUM N/A
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.
CVE-2019-10016 1 Gforge 1 Advanced Server 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.