CVE-2008-2381

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-01-02 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the create function in common/include/GroupJoinRequest.class in GForge 4.5 and 4.6 allows remote attackers to execute arbitrary SQL commands via the comments variable.

Affected products

Gforge: 4.5, 4.6

References

http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&r1=4590&r2=6709
http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&view=log
http://secunia.com/advisories/33229
http://secunia.com/advisories/33499
http://security-tracker.debian.net/tracker/CVE-2008-2381
http://www.securityfocus.com/bid/33086
http://www.securitytracker.com/id?1021510
http://www.vupen.com/english/advisories/2009/0004
https://exchange.xforce.ibmcloud.com/vulnerabilities/47703
http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&r1=4590&r2=6709
http://gforge.org/scm/viewvc.php/branches/Branch_4_5/gforge/common/include/GroupJoinRequest.class?root=gforge&view=log
http://secunia.com/advisories/33229

Get alerted when CVE-2008-2381 or the next vulnerability affects your stack