CVE-2005-2902

SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.

CVSS Metrics

GitHub Security Advisory GHSA-vq56-x9hp-75c6

SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute...

References (10)

• http://marc.info/?l=bugtraq&m=112629627512785&w=2
• http://secunia.com/advisories/16762/ Vendor Advisory
• http://www.rgod.altervista.org/class1.html Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/14774 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22209
• http://marc.info/?l=bugtraq&m=112629627512785&w=2
• http://secunia.com/advisories/16762/ Vendor Advisory
• http://www.rgod.altervista.org/class1.html Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/14774 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22209