CVE-2008-6187: SQL Injection
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the releaseid parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict or block HTTP access to /frs/shownotes.php (the FRS shownotes endpoint) at the perimeter using a WAF, web server access controls, or network firewall. For example, create a WAF rule to block requests to /frs/shownotes.php or allow access only from trusted administrative IP addresses to mitigate SQL injection via the release_id parameter.
- Operational
Inventory all GForge deployments and identify any instances running GForge version 4.5.19 or earlier; prioritize those instances for mitigation and monitoring.
- Operational
Review web server and application logs for requests to /frs/shownotes.php and for suspicious or malformed values of the release_id parameter that may indicate attempted or successful SQL injection.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6187?
CVE-2008-6187 is classified as a high severity SQL injection vulnerability that can lead to arbitrary SQL command execution.
How do I fix CVE-2008-6187?
To fix CVE-2008-6187, upgrade Gforge to version 4.5.20 or later, which addresses this vulnerability.
What is the impact of CVE-2008-6187?
The impact of CVE-2008-6187 allows remote attackers to manipulate the database, potentially leading to data theft or loss.
Which versions of Gforge are affected by CVE-2008-6187?
Gforge versions 4.5.19 and earlier, as well as 3.21, 4.5, 4.5.11, 3.1, 3.2, 4.5.16, 3.3, and 4.5.14 are affected by CVE-2008-6187.
Can remote attackers exploit CVE-2008-6187?
Yes, remote attackers can exploit CVE-2008-6187 via the release_id parameter to execute arbitrary SQL commands.