Vendor Dictionary: Sourceforge.net

Sourceforge.net

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	http://www.sourceforge.net/ [visit link]
Email:	[None Entered]
Security URL:	http://sourceforge.net/docman/display_doc.php?group_id=1&docid=11230#support_security [visit link]
Security Email:	staffsourceforge.net
Knowledge Base:	[None Entered]
Notes:	http://sourceforge.net/support/getsupport.php
Full Details...

Vulnerabilities by Vendor Product

Sourceforge.net

Sourceforge.net

Alexandria-dev: 2.0; OSVDB ID: 49229 SourceForge (alexandria) Skills Profile Multiple Field XSS; OSVDB ID: 49226 SourceForge (alexandria) patch/index.php Upload Spoofing Arbitrary File Access; OSVDB ID: 49227 SourceForge (alexandria) sendmessage.php Arbitrary Mail Relay; OSVDB ID: 49228 SourceForge (alexandria) sendmessage.php CRLF Injection; 2.5; OSVDB ID: 49229 SourceForge (alexandria) Skills Profile Multiple Field XSS; OSVDB ID: 49226 SourceForge (alexandria) patch/index.php Upload Spoofing Arbitrary File Access; OSVDB ID: 49227 SourceForge (alexandria) sendmessage.php Arbitrary Mail Relay; OSVDB ID: 49228 SourceForge (alexandria) sendmessage.php CRLF Injection

XTux: 20030306; OSVDB ID: 2303 XTux Initial Connection Malformed Input Remote DoS

LBreakout2: 2.5; OSVDB ID: 16570 LBreakout2 Unspecified Buffer Overflow

Shoutbox: 3.00 alpha; OSVDB ID: 15391 Webfroot shoutbox.php conf Parameter Traversal Arbitrary File Access; 2.3x; OSVDB ID: 15391 Webfroot shoutbox.php conf Parameter Traversal Arbitrary File Access

Cscope: 15.5; OSVDB ID: 11920 Cscope #include filename Overflow

AAIportal: 1.0.0; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 1.0.1; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 1.2.0; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 1.3.0; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 1.3.1; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 1.3.2; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection; 0.9.5; OSVDB ID: 29557 AAIportal Project Unspecified SQL Injection

phpCollegeExchange: 0.1.5c

MediaWiki: 1.4.5; OSVDB ID: 17763 MediaWiki Page Move Template XSS; 1.3; OSVDB ID: 17763 MediaWiki Page Move Template XSS; 1.4.6; OSVDB ID: 17763 MediaWiki Page Move Template XSS

WeBid: 0.7.3 RC9

gaim: 0.57; OSVDB ID: 5310 Gaim /tmp File Account Credentials Disclosure; 0.74; OSVDB ID: 3733 Gaim Extract Info Field Function Buffer Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.