Vulnerabilities (CVE)

Filtered by vendor Gforge Subscribe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-0299 1 Gforge 1 Gforge 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.
CVE-2019-10016 1 Gforge 1 Advanced Server 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.