Filtered by vendor Gforge
Subscribe
Total
22 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2005-0299 | 1 Gforge | 1 Gforge | 2025-04-03 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php. | |||||
CVE-2019-10016 | 1 Gforge | 1 Advanced Server | 2024-11-21 | 4.3 MEDIUM | 6.1 MEDIUM |
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring. |