CVE-2005-2325 - CVE House
Back to Database
Status published Medium CVE-2005-2325

Clever Copy 2.0 and 2.0a allows remote attackers to obtain...

Vulnerability Description

Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10) showlastforumbb2.php, or (11) showlastforumbb2block.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2325

Credits & Attribution

No credits recorded in the NVD database.

References

More from clever copy

View All →
CVE-2008-2909
SQL injection vulnerability in results.php in Clever Copy 3.0 allows...
High 7.5
CVE-2008-1608
SQL injection vulnerability in postview.php in Clever Copy 3.0 allows...
High 7.5
CVE-2008-0363
Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier...
High 7.5
CVE-2008-0362
Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0...
Medium 4.3
CVE-2006-1718
Magus Perde Clever Copy 3.0 and earlier stores sensitive information...
Medium 5

Affected Vendor

clever copy

View all reports →

Affected Software

clever copy
Vulnerable Versions:
2.0, 2.0a

Timeline

Official Publish: July 19th, 2005
Last Modified: September 16th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.