CVE-2005-2430 - CVE House
Back to Database
Status published Medium CVE-2005-2430

Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id or (2) group_id parameter to forum.php, (3) project_task_id parameter to task.php, (4) id parameter to detail.php, (5) the text field on the search page, (6) group_id parameter to qrs.php, (7) form, (8) rows, (9) cols or (10) wrap parameter to notepad.php, or the login field on the login form.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2430

Credits & Attribution

No credits recorded in the NVD database.

References

More from gforge

View All →
CVE-2019-10016
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words...
Medium 6.1
CVE-2009-4070
SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other...
High 7.5
CVE-2009-4069
Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and...
Medium 4.3
CVE-2009-3304
GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to...
Low 3.3
CVE-2009-3303
Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7...
Medium 4.3

Affected Vendor

Affected Software

gforge
Vulnerable Versions:
4.5

Timeline

Official Publish: August 3rd, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.