Unrated severityNVD Advisory· Published Sep 14, 2005· Updated Jun 16, 2026

CVE-2005-2902

Description

SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

www.rgod.altervista.org/class1.htmlnvdExploitVendor Advisory
www.securityfocus.com/bid/14774nvdExploit
secunia.com/advisories/16762/nvdVendor Advisory
marc.infonvd
exchange.xforce.ibmcloud.com/vulnerabilities/22209nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000