high7.5Public exploit code
CVE-2005-2323
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statemen…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpMyFamily 1.4.0 - SQL Injection2005-03-27 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Class-1 | Class-1 Forum | Versions 0.23.2, 0.24.4 |
| Clever Copy | Clever Copy | All versions |
References
- NVD record
- CVE.org record
- http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html
- http://secunia.com/advisories/16078
- http://securitytracker.com/id?1014485
- http://securitytracker.com/id?1014486
- http://www.osvdb.org/17921
- http://www.osvdb.org/17922
- http://www.osvdb.org/17923
- http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html
- http://secunia.com/advisories/16078
- http://securitytracker.com/id?1014485
- http://securitytracker.com/id?1014486
- http://www.osvdb.org/17921
- http://www.osvdb.org/17922
- http://www.osvdb.org/17923