Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Gforge

First CVE: May 2, 2005Active for: 21 yearsTotal CVEs: 22
35.7
VTI Score
Medium

Gforge provides collaboration and project-management platforms that serve as centralized repositories for software development teams, spanning products such as Gforge, Advanced Server, and Garennes. The vendor's vulnerability footprint, though modest in volume, occupies a more prominent position in the landscape than its product count alone suggests, reflecting the critical role these platforms play in managing access to code and project artifacts. Vulnerabilities concentrate in application-layer input-handling and server-side logic: SQL injection, cross-site scripting, link-resolution flaws, and improper input validation recur across the product line, consistent with the challenges of building web-facing collaboration interfaces that parse user input and generate dynamic content. Public exploit code for these flaws has frequently become available, making timely patching essential for organizations running exposed instances. Current exploitation activity, severity distribution, and detailed exposure metrics are shown alongside this summary.

FAUCET AI Generated
22
Total CVEs
More Total CVEs than 96% of tracked vendors
1.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 76% of tracked vendors
6.0
Avg CVSS Score
Higher Avg CVSS Score than 29% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Gforge over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 2, 2005
21 years ago
Most Recent CVE
Mar 25, 2019
2,678 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (22 CVEs).

22 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2008-6189HIGH
SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/index.php, (2) news/index.php, and (3) to
Feb 19, 20097.528NOYES
CVE-2008-6188HIGH
SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_edit[] parameter.
Feb 19, 20097.528NOYES
CVE-2008-6187HIGH
SQL injection vulnerability in frs/shownotes.php in Gforge 4.5.19 and earlier allows remote attackers to execute arbitrary SQL commands via the release_id parameter.
Feb 19, 20097.528NOYES
CVE-2007-3913HIGH
SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Sep 6, 20077.528NOYES
CVE-2007-2298HIGH
Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertoire_config parameter t
Apr 26, 20077.528NOYES
CVE-2005-1752MEDIUM
viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file_name parameter.
Dec 31, 20056.427NOYES
CVE-2007-4966MEDIUM
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL commands via the skill_delete[] parameter.
Sep 18, 20076.826NOYES
CVE-2008-0167MEDIUM
The write_array_file function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attack
May 18, 20084.625NOYES
CVE-2008-0173HIGH
SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports.
Jan 15, 20087.523NONO
CVE-2019-10016MEDIUM
GForge Advanced Server 6.4.4 allows XSS via the commonsearch.php words parameter, as demonstrated by a snippet/search/?words= substring.
Mar 25, 20196.121NONO
View all 22 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products22 CVEs
9%
55%
36%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network1 (4.5%)
Unknown21 (95.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (4.5%)
High0 (0.0%)
Unknown21 (95.5%)
User Interaction
None0 (0.0%)
Unknown21 (95.5%)
Required1 (4.5%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (4.5%)
Unknown21 (95.5%)

Exploit Exposure

Signals from CVEs in this vendor scope (22 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
8 CVEs
36.4% of CVEs· 80th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Gforge.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Gforge — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Gforge's Products

View all 1 CNAs →

Top CWEs