PT-2005-3249 · Unknown · Clever Copy+1

Lostmon · Publicado 2005-07-19 · Atualizado 2008-09-05 · CVE-2005-2323

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Class-1 Forum versions 0.23.2 through 0.24.4 Clever Copy with forums installed (affected versions not specified)

Description The issue allows remote attackers to modify SQL statements. This can be achieved via the id parameter to "viewattach.php", the viewuser id parameter to "users.php", or the id or forum parameters to "viewforum.php".

Recommendations For Class-1 Forum versions 0.23.2 through 0.24.4, consider restricting access to the "viewattach.php", "users.php", and "viewforum.php" scripts until a patch is available. For Clever Copy with forums installed, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-2323

Produtos afetados

Class-1 Forum

Clever Copy

Referências · 9

• 🔥 http://securitytracker.com/id?1014485 · Exploit
• 🔥 http://securitytracker.com/id?1014486 · Exploit
• 🔥 http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html · Exploit
• 🔥 https://exploit-db.com/exploits/1208 · Exploit
• http://osvdb.org/17923 · Nota
• http://secunia.com/advisories/16078 · Aviso do Fabricante
• http://osvdb.org/17922 · Nota
• http://osvdb.org/17921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2323 · Nota de Segurança