CVE-2006-2018 in vBulletininfo

Zusammenfassung

von MITRE

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

25.04.2006

Veröffentlichung

25.04.2006

Moderieren

akzeptiert

Eintrag

VDB-29891

CPE

bereit

EPSS

0.01182

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!