Lucene search

K

5 matches found

CVE
CVE
added 2005/07/19 4:0 a.m.43 views

CVE-2005-2323

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php...

7.5CVSS8.3AI score0.00752EPSS
CVE
CVE
added 2005/07/19 4:0 a.m.43 views

CVE-2005-2326

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php.

4.3CVSS5.7AI score0.00337EPSS
CVE
CVE
added 2005/07/19 4:0 a.m.40 views

CVE-2005-2325

Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.p...

5CVSS6.7AI score0.00362EPSS
CVE
CVE
added 2005/07/19 4:0 a.m.35 views

CVE-2005-2324

Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.

4.3CVSS5.7AI score0.00301EPSS
CVE
CVE
added 2005/07/19 4:0 a.m.29 views

CVE-2005-2322

Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.

4.3CVSS6AI score0.00731EPSS