CVE-2005-2430 Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project...
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gforge | = 4.5 | No fix listed |
References
- 20050727 Cross Site Scripting vulnerabilities in GForge mailing-list
- 16253 third-party-advisory vendor-advisory
- 20622 third-party-advisory
- DSA-1094 vendor-advisory
- 18299 vdb-entry
- 18300 vdb-entry
- 18301 vdb-entry
- 18302 vdb-entry
- 18303 vdb-entry
- 18304 vdb-entry
- 14405 vdb-entry
- gforge-multiple-xss(21558) vdb-entry