Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

gforge: insufficient input sanitizing

Package(s):

gforge

CVE #(s):

CVE-2008-2381

Created:

January 9, 2009

Updated:

January 14, 2009

Description:

From the Debian advisory: It was discovered that GForge, a collaborative development tool, insufficiently sanitizes some input allowing a remote attacker to perform SQL injection.

Alerts:

Debian

DSA-1698-1

2009-01-09

(Log in to post comments)