jelsoft vbulletin 3.0.0 rc4 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote malicious users to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was...

Jelsoft Vbulletin 3.0.4 Jelsoft Vbulletin 3.0.0 Rc4 Jelsoft Vbulletin 3.0.1 Jelsoft Vbulletin 3.0.0 Beta 2 Jelsoft Vbulletin 3.0.6 Jelsoft Vbulletin 3.0.0 Can4 Jelsoft Vbulletin 3.0 Beta 2 Jelsoft Vbulletin 3.0.0 Jelsoft Vbulletin 3.0.2 Jelsoft Vbulletin 3.0.12 Jelsoft Vbulletin 3.0.3 Jelsoft Vbulletin 3.0.5 Jelsoft Vbulletin 3.0

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote malicious users to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.

Jelsoft Vbulletin 3.0.4 Jelsoft Vbulletin 3.0.0 Rc4 Jelsoft Vbulletin 3.0.1 Jelsoft Vbulletin 3.0.0 Beta 2 Jelsoft Vbulletin 3.0.6 Jelsoft Vbulletin 3.0.0 Can4 Jelsoft Vbulletin 3.0 Beta 2 Jelsoft Vbulletin 3.0.0 Jelsoft Vbulletin 3.0.2 Jelsoft Vbulletin 3.0.3 Jelsoft Vbulletin 3.0.5

1 EDB exploit

Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote malicious users to inject arbitrary web script or HTML via the query parameter.

Jelsoft Vbulletin 3.0.0 Rc4

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook