Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6v3f-rwg9-w274

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php.

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php.

EPSS

Процентиль: 36%
0.00149
Низкий

Дефекты

CWE-89

Связанные уязвимости

ubuntu
почти 17 лет назад

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php.

nvd
почти 17 лет назад

SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) top/topusers.php, which is not properly handled in database-pgsql.php.

debian
почти 17 лет назад

SQL injection vulnerability in GForge 4.5.19 allows remote attackers t ...

EPSS

Процентиль: 36%
0.00149
Низкий

Дефекты

CWE-89