CVE-2007-0176

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows remote attackers to inject arbitrary web script or HTML via the words parameter.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/31248
http://secunia.com/advisories/23675Vendor Advisory
http://secunia.com/advisories/28598
http://securityreason.com/securityalert/2133
http://securitytracker.com/id?1017482Vendor Advisory
http://www.debian.org/security/2008/dsa-1475
http://www.eazel.es/advisory006-gforge-cross-site-scripting-vulnerability.htmlExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/456296/100/0/threaded
http://www.securityfocus.com/bid/21946Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31346
http://osvdb.org/31248
http://secunia.com/advisories/23675Vendor Advisory
http://secunia.com/advisories/28598
http://securityreason.com/securityalert/2133
http://securitytracker.com/id?1017482Vendor Advisory
http://www.debian.org/security/2008/dsa-1475
http://www.eazel.es/advisory006-gforge-cross-site-scripting-vulnerability.htmlExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/456296/100/0/threaded
http://www.securityfocus.com/bid/21946Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31346

Timeline

Published: Jan 11, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-01775.1Cross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before 1.7.2, 1.8 before 1.8.3, and 1.9 before 1.CVE-2007-01787.5PHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote attackers to execute arbitrary PHP code via a URL i CVE-2007-01797.5SQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the subid parame CVE-2007-01807.6Stack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute arbitrary code via a crafted ISO file containing CVE-2007-01817.5PHP remote file inclusion vulnerability in include/common_function.php in magic photo storage website allows remote attackers to execute arb CVE-2007-01827.5Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a CVE-2007-01836.8Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML CVE-2007-01847.5Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that CVE-2007-01855.0Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unk CVE-2007-01866.8Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers to inject arbitrary web script or HTML via CVE-2007-01877.5F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading s CVE-2007-01886.5F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation