Launchpad.net

CVE 2008-0173

SQL injection vulnerability in Gforge 4.6.99 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified parameters, related to RSS exports.

See the CVE page on Mitre.org for more details.