PatchTheCVEclever copy vulnerabilities and fixes
Recent CVEs affecting clever copy, with upgrade or downgrade steps. 13 tracked.
Also searched as: clevercopy.
clever copy has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2008-06-30. Highest priority: CVE-2006-0583 (score 53/100).
- CVE-2008-2909 HIGH 7.5 DOWNGRADE SQL injection vulnerability in results.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL
- CVE-2008-1608 HIGH 7.5 DOWNGRADE SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQ
- CVE-2008-0363 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitr
- CVE-2008-0362 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers
- CVE-2006-1718 MEDIUM 5.0 UPGRADE Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient acce
- CVE-2006-0796 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject a
- CVE-2006-0627 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject a
- CVE-2006-0583 HIGH 7.5 DOWNGRADE SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execu
- CVE-2005-2326 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitra
- CVE-2005-2325 MEDIUM 5.0 DOWNGRADE Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request
- CVE-2005-2324 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitra
- CVE-2005-2323 HIGH 7.5 DOWNGRADE MITIGATE Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums install
- CVE-2005-2322 MEDIUM 4.3 DOWNGRADE MITIGATE Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums insta
FAQ
How do I fix clever copy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is clever copy being exploited right now?
None of the tracked clever copy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which clever copy CVE should I patch first?
CVE-2006-0583 currently ranks highest (53/100): SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execu.