CVE-2007-3918 Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTML via the confirm_hash parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gforge | = 4.6_b2 | No fix listed |
References
- gforge.org
- gforge.org
- 27042 third-party-advisory
- 27046 third-party-advisory vendor-advisory
- DSA-1383 vendor-advisory
- 25923 vdb-entry
- ADV-2007-3356 vdb-entry