Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

jelsoft vbulletin 3.0.0 beta 2 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2004-1515

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote malicious users to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0.0 Rc4Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 3.0.0 Beta 2Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 3.0.0 Can4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 3.0.0Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0.3Jelsoft Vbulletin 3.0.5
NA

CVE-2006-2018

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote malicious users to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was...
Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0.0 Rc4Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 3.0.0 Beta 2Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 3.0.0 Can4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 3.0.0Jelsoft Vbulletin 3.0.2Jelsoft Vbulletin 3.0.12Jelsoft Vbulletin 3.0.3Jelsoft Vbulletin 3.0.5Jelsoft Vbulletin 3.0
NA

CVE-2005-0511

misc.php for vBulletin 3.0.6 and previous versions, when "Add Template Name in HTML Comments" is enabled, allows remote malicious users to execute arbitrary PHP code via nested variables in the template parameter.
Jelsoft Vbulletin 2.2.0Jelsoft Vbulletin 3.0.4Jelsoft Vbulletin 3.0.0 Rc4Jelsoft Vbulletin 2.3.0Jelsoft Vbulletin 3.0.1Jelsoft Vbulletin 2.2.9 CanJelsoft Vbulletin 3.0.0 Beta 2Jelsoft Vbulletin 3.0.6Jelsoft Vbulletin 2.2.1Jelsoft Vbulletin 2.0.2Jelsoft Vbulletin 2.0Jelsoft Vbulletin 2.0.1Jelsoft Vbulletin 2.2.7Jelsoft Vbulletin 3.0.0 Can4Jelsoft Vbulletin 2.0 Beta 2Jelsoft Vbulletin 2.2.4Jelsoft Vbulletin 3.0 Beta 2Jelsoft Vbulletin 2.2.2Jelsoft Vbulletin 2.2.5Jelsoft Vbulletin 2.0 Beta 3Jelsoft Vbulletin 3.0.0Jelsoft Vbulletin 2.2.6
NA

CVE-2003-0295

Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote malicious users to inject arbitrary web script and HTML via the "Preview Message" capability.
Jelsoft Vbulletin 3.0.0 Beta 2
NA

CVE-2004-1823

Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 up to and including 3.0 can4 allows remote malicious users to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.
Jelsoft Vbulletin 3.0.0 Can4Jelsoft Vbulletin 3.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusionIMAPCVE-2024-36103CVE-2024-28995CVE-2024-37325CVE-2024-30078CVE-2024-30082SQL injectionCVE-2024-30052
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook