CVE-2007-3913

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-20CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 6, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-39159.1Mondo 2.24 has insecure handling of temporary files.CVE-2007-39164.4The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdCVE-2007-39177.8The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via aCVE-2007-39184.3Cross-site scripting (XSS) vulnerability in account/verify.php in GForge 4.6b2 allows remote attackers to inject arbitrary web script or HTMCVE-2007-39196.0(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.CVE-2007-39206.2GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical acCVE-2007-39213.3gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files.CVE-2007-39226.8Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through CVE-2007-39237.8The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appCVE-2007-39249.3Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registeredCVE-2007-39256.5Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users toCVE-2007-39267.8Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involv
CVE-2007-3913: High severity, CVSS 7.5 | Vulnix