CVE-2005-2902

Impact

SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=112629627512785&w=2
• http://secunia.com/advisories/16762/
• http://www.rgod.altervista.org/class1.html
• http://www.securityfocus.com/bid/14774
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22209
• http://marc.info/?l=bugtraq&m=112629627512785&w=2
• http://secunia.com/advisories/16762/
• http://www.rgod.altervista.org/class1.html
• http://www.securityfocus.com/bid/14774
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22209