Berlios maintains a small collection of open-source projects spanning IRC clients, discussion platforms, GPS utilities, and media applications, with a narrowly scoped but recurrent vulnerability footprint centered on SQL injection, NULL-pointer dereference, and unclassified flaws. Vulnerabilities affecting these products frequently acquire public exploit code, reflecting the accessible nature of open-source disclosure and the relative ease of developing proof-of-concept tooling for injection and memory-safety issues. Defenders tracking these projects should prioritize patch application for internet-facing components such as discussion forums; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Berlios over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-1388HIGH Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certai | Dec 31, 2004 | 7.5 | 78 | NO | YES |
CVE-2005-0129HIGH The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded b | Apr 14, 2005 | 7.5 | 32 | NO | YES |
CVE-2005-3864HIGH SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the cnt parameter. NOTE: various reports ind | Nov 29, 2005 | 7.5 | 28 | NO | YES |
CVE-2008-6100MEDIUM Multiple SQL injection vulnerabilities in Discussion Forums 2k 3.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) CatID pa | Feb 10, 2009 | 6.8 | 26 | NO | YES |
CVE-2013-4412HIGH slim has NULL pointer dereference when using crypt() method from glibc 2.17 | Nov 4, 2019 | 7.5 | 20 | NO | NO |
CVE-2005-0130HIGH Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly | Apr 14, 2005 | 7.5 | 20 | NO | NO |
CVE-2005-0131MEDIUM The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC serv | Apr 14, 2005 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Berlios.
Media articles that mention a CVE ID that affects a product developed by Berlios — matched by CVE ID, not by vendor name.