CVE-2008-2381

Description

References

• gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class
• gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class
• secunia.com/advisories/33229 · Vendor Advisory
• secunia.com/advisories/33499
• security-tracker.debian.net/tracker/CVE-2008-2381
• securityfocus.com/bid/33086
• securitytracker.com/id
• vupen.com/english/advisories/2009/0004
• exchange.xforce.ibmcloud.com/vulnerabilities/47703

Weitere Schwachstellen in gforge

• CVE-2009-3304NIEDRIG 3.3GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' ho…
• CVE-2009-4070HOCH 7.5SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands v…
• CVE-2009-4069MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject ar…
• CVE-2009-3303MITTEL 4.3Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbi…
• CVE-2008-6189HOCH 7.5SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/i…