Security Advisory

CVE-2008-2381

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-01-02 19:00:00
Last updated 2024-08-07 08:58:02
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.