CVE-2005-2430

State: Published
Severity: Not scored
Published: Aug 3, 2005
Updated: Aug 7, 2024
Reserved: Aug 3, 2005

Description

Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

18300vdb-entry
20622third-party-advisory
20050727 Cross Site Scripting vulnerabilities in GForgemailing-list
gforge-multiple-xss(21558)vdb-entry
16253third-party-advisory
18301vdb-entry
18304vdb-entry
DSA-1094vendor-advisory
18303vdb-entry
18302vdb-entry
14405vdb-entry
18299vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.