CVE Vulnerabilities

CVE-2004-1515

Published: Dec 31, 2004 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.

Affected Software

Name Vendor Start Version End Version
Vbulletin Jelsoft 3.0.0 3.0.0
Vbulletin Jelsoft 3.0.0_beta_2 3.0.0_beta_2
Vbulletin Jelsoft 3.0.0_can4 3.0.0_can4
Vbulletin Jelsoft 3.0.0_rc4 3.0.0_rc4
Vbulletin Jelsoft 3.0.1 3.0.1
Vbulletin Jelsoft 3.0.2 3.0.2
Vbulletin Jelsoft 3.0.3 3.0.3
Vbulletin Jelsoft 3.0.4 3.0.4
Vbulletin Jelsoft 3.0.5 3.0.5
Vbulletin Jelsoft 3.0.6 3.0.6
Vbulletin Jelsoft 3.0_beta_2 3.0_beta_2

References