Skip to content

Gforge · weakness class

SQL Injection

8 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) t…CVE-2008-6189Gforge · 2.3% likely

    CWE-89

  2. SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports.CVE-2008-0173Gforge · 2.1% likely

    CWE-89

  3. SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2007-3913Gforge · 2.0% likely

    CWE-89

  4. SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors.CVE-2009-4070Gforge · 1.7% likely

    CWE-89

  5. SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the…CVE-2008-2381Gforge · 1.6% likely

    CWE-89

  6. SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter.CVE-2007-4966Gforge · 1.5% likely

    CWE-89

  7. SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_edit[] parameter.CVE-2008-6188Gforge · 1.3% likely

    CWE-89

  8. SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the release_id parameter.CVE-2008-6187Gforge · 1.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.