Vendor

    Sourceforge

    28 known vulnerabilities in products by Sourceforge, 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sourceforge
    HighCVE-2018-25178

    Easyndexer 1.0 Arbitrary File Download via showtif.php

    		7.5
    Not ratedCVE-2005-4837

    Net-SNMP: Denial of Service

    also in 1 other product

    		—
    HighCVE-2019-25539

    202CMS v10 beta SQL Injection via register.php

    		8.2
    MediumCVE-2019-25632

    phpFileManager 1.7.8 Local File Inclusion via index.php

    also in 1 other product

    		6.2
    HighCVE-2019-25538

    202CMS v10 beta SQL Injection via log_user Parameter

    		8.2
    MediumCVE-2019-1010004

    Sourceforge SoX - Sound eXchange: Out-of-Bounds Read

    also in 1 other product

    		5.5
    HighCVE-2019-25575

    SimplePress CMS 1.0.7 SQL Injection via p and s Parameters

    		8.2
    HighCVE-2018-25209

    OpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter

    		8.2
    Not ratedCVE-2007-1466

    Sourceforge Wordperfect Document Importer-exporter: Integer Overflow

    		—
    HighCVE-2018-25192

    GPS Tracking System 2.12 SQL Injection via username Parameter

    		8.2
    HighCVE-2019-25705

    Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

    		8.4
    HighCVE-2018-25189

    Data Center Audit 2.6.2 SQL Injection via username Parameter

    		8.2
    HighCVE-2018-25166

    Meneame English Pligg 5.8 SQL Injection via search Parameter

    		8.2
    Not ratedCVE-2008-2298

    Sourceforge Web Slider: Authentication Bypass

    		—
    HighCVE-2018-25251

    Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket

    		8.4
    HighCVE-2019-25529

    Placeto CMS Alpha rv.4 SQL Injection via page Parameter

    		7.1
    Not ratedCVE-2008-0501

    Sourceforge Phpmyclub: Path Traversal

    		—
    MediumCVE-2018-25190

    Easyndexer 1.0 Cross-Site Request Forgery via createuser.php

    		5.3
    MediumCVE-2018-25177

    Data Center Audit 2.6.2 Cross-Site Request Forgery via dca_resetpw.php

    		5.3
    Not ratedCVE-2001-0234

    Sourceforge Newsdaemon: Privilege Escalation

    		—
    Not ratedCVE-2002-2362

    Sourceforge Mymarket: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2008-2503

    Sourceforge Emule X-ray: Buffer Overflow

    		—
    Not ratedCVE-2007-6640

    Sourceforge Creammonkey: security vulnerability

    		—
    Not ratedCVE-2007-1135

    Sourceforge Webmplayer: SQL Injection

    		—
    Not ratedCVE-2008-6161

    Sourceforge Wow Raid Manager: Cross-Site Scripting (XSS)

    		—

    All vulnerabilities in search