CVE-2005-2430: XSS
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forumid or (2) groupid parameter to forum.php, (3) projecttaskid parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) groupid parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2430?
CVE-2005-2430 has been categorized as a medium severity vulnerability due to the potential for remote attacks using cross-site scripting.
How do I fix CVE-2005-2430?
To fix CVE-2005-2430, upgrade GForge to the latest version that addresses the vulnerabilities.
What types of attacks are possible with CVE-2005-2430?
CVE-2005-2430 allows attackers to execute arbitrary web scripts or HTML on affected GForge installations via XSS.
Which software versions are affected by CVE-2005-2430?
CVE-2005-2430 specifically affects GForge version 4.5.
How can I mitigate CVE-2005-2430 if I cannot update immediately?
To mitigate CVE-2005-2430, sanitize user inputs and validate parameters in the affected GForge pages to prevent XSS.