CVE-2005-2322 | BDVDB-2026-11700 Detail

Description#

Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/16078
http://securitytracker.com/id?1014485
http://www.securityfocus.com/bid/14261
http://securitytracker.com/id?1014486
http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html
http://www.osvdb.org/17920

Exploit#

No public exploit known

History#

Version 12005-07-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.