Vulnerabilities > Gforge > Gforge > 4.7.3
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-11-24 | CVE-2009-4070 | SQL Injection vulnerability in Gforge 4.5.14/4.7.3 SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors. | 7.5 |
2009-11-24 | CVE-2009-4069 | Cross-Site Scripting vulnerability in Gforge 4.5.14/4.7.3 Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |