PT-2006-3723 · Vbulletin Solutions · Vbulletin

CVE-2006-2805

Publicado

2006-06-03

Atualizado

2008-09-05

CVSS v2.0

5.0

Média

Vetor

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions VBulletin version 3.0.10

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the featureid parameter.

Recommendations For VBulletin version 3.0.10, avoid using the featureid parameter in affected API endpoints until the issue is resolved.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2006-2805

Vbulletin