CVE-2005-2323

Name: CVE-2005-2323
Creator: NVD / NIST
Published: 2005-07-19T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.71%

Last modified Jun 16, 2026

CVE-2005-2323 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php.. EPSS estimates a 2.71% chance of exploitation in the next 30 days.

Description

Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php.

Metrics

EPSS Probability

2.71%

84.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Class-1	Class-1 Forum	0.23.2
Class-1	Class-1 Forum	0.24.4
Clever Copy	Clever Copy	All versions

References

http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16078Vendor Advisory
http://securitytracker.com/id?1014485Exploit
http://securitytracker.com/id?1014486Exploit
http://www.osvdb.org/17921
http://www.osvdb.org/17922
http://www.osvdb.org/17923
http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.htmlExploit, Vendor Advisory
http://secunia.com/advisories/16078Vendor Advisory
http://securitytracker.com/id?1014485Exploit
http://securitytracker.com/id?1014486Exploit
http://www.osvdb.org/17921
http://www.osvdb.org/17922
http://www.osvdb.org/17923

Timeline

Published: Jul 19, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-2323?

How severe is CVE-2005-2323?

Severity scoring for CVE-2005-2323 is pending analysis. The EPSS model estimates a 2.71% probability of exploitation in the next 30 days.

How do I fix CVE-2005-2323?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-2323?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST