CVE-2005-2323

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php.

• http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/16078Vendor Advisory
• http://securitytracker.com/id?1014485Exploit
• http://securitytracker.com/id?1014486Exploit
• http://www.osvdb.org/17921
• http://www.osvdb.org/17922
• http://www.osvdb.org/17923
• http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/16078Vendor Advisory
• http://securitytracker.com/id?1014485Exploit
• http://securitytracker.com/id?1014486Exploit
• http://www.osvdb.org/17921
• http://www.osvdb.org/17922
• http://www.osvdb.org/17923

Published

Jul 19, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-2317Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x …
• CVE-2005-2318Cross-site scripting (XSS) vulnerability in showerr.asp in D…
• CVE-2005-2319PHP remote file include vulnerability in Yawp library 1.0.6 …
• CVE-2005-2320WebCalendar before 1.0.0 does not properly restrict access t…
• CVE-2005-2321PHP remote file inclusion vulnerability in CaLogic 1.2.2 all…
• CVE-2005-2322Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.…
• CVE-2005-2324Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 …
• CVE-2005-2325Clever Copy 2.0 and 2.0a allows remote attackers to obtain t…
• CVE-2005-2326Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 …
• CVE-2005-2327Cross-site scripting (XSS) vulnerability in e107 0.617 and e…
• CVE-2005-2328PHP remote file inclusion vulnerability in im.php in Laffer …
• CVE-2005-2329MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S…