CVE:CVE-2005-2323
CNNVD:CNNVD-200507-216
Clever Copy是一款免费的站点架构和新闻发布程序。
Class-1 Forum 0.24.4和0.23.2以及安装了论坛的Clever Copy存在多个SQL注入漏洞。
远程攻击者可以通过(1) viewattach.php的id参数、(2) users.php的viewuser_id参数或viewforum.php的(3) id或(4) forum参数修改SQL语句。
solution:Upgrade class-1 class-1_forum to a higher version than 0.23.2,0.24.4,and avoid the version 0.23.2,0.24.4; Upgrade clever_copy clever_copy to a higher version than *