Sourceforge

28 CVEs across 26 Sourceforge products. Browse Sourceforge vulnerabilities, severities, and proof-of-concept exploits.

Sourceforge products with known CVEs

ProductCVEs
202cms2
Data Center Audit2
Easyndexer2
Creammonkey1
Echo Mirage1
Emule X-Ray1
Gps Tracking System1
Greasekit1
Jgbbs1
Meneame English Pligg1
Mymarket1
Net-Snmp1
Newsdaemon1
Openbiz Cubi Lite1
Phpfilemanager1
Phpmyclub1
Php Ticket1
Placeto Cms1
Putmail1
Simplepress Cms1
Snes9k 0.0.9z1
Sox - Sound Exchange1
Webmplayer1
Web Slider1
Wordperfect Document Importer-Exporter1
Wow Raid Manager1
Sourceforge CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-25705High8.42026-04-12Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an o…
CVE-2018-25251High8.42026-04-04Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception ha…
CVE-2018-25209High8.22026-03-26OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through t…
CVE-2019-25632Medium6.22026-03-24phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm…
CVE-2019-25575High8.22026-03-21SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod…
CVE-2019-25539High8.22026-03-12202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…
CVE-2019-25538High8.22026-03-12202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…
CVE-2019-25529High7.12026-03-12Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through…
CVE-2018-25192High8.22026-03-06GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through t…
CVE-2018-25190Medium5.32026-03-06Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged…
CVE-2018-25189High8.22026-03-06Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arb…
CVE-2018-25178High7.52026-03-06Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file par…
CVE-2018-25177Medium5.32026-03-06Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by su…
CVE-2018-25166High8.22026-03-06Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious…
CVE-2019-1010004Medium5.52019-07-15SoX - Sound eXchange 14.4.2 and earlier is affected by: Out-of-bounds Read. The impact is: Denial of Service. The component is: read_samples function at xa.c:2…
CVE-2008-61612009-02-18Cross-site scripting (XSS) vulnerability in WOW Raid Manager (WRM) before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…
CVE-2008-25032008-05-29Buffer overflow in Uploadlist in eMule X-Ray before 1.4 has unknown impact and remote attack vectors.
CVE-2008-22982008-05-18Admin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to 1.
CVE-2008-05012008-01-30Directory traversal vulnerability in phpMyClub 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page_couran…
CVE-2007-66402008-01-04Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the co…
CVE-2007-15722007-03-21SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter, a…
CVE-2007-14662007-03-16Integer overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allows user-assisted remot…
CVE-2007-11372007-03-02putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the us…
CVE-2007-11352007-03-02Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) strid parameter to…
CVE-2005-48372005-12-31snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers…
CVE-2002-23642002-12-31Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.
CVE-2002-23622002-12-31Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg p…
CVE-2001-02342001-05-03NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.