Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2695
cve-2004-2695
sql injection
jelsoft vbulletin
remote attack
nvd
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.1%
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.
Related
cvelist
cvelist
CVE-2004-2695
2007-10-06 21:00:00
CVE-2006-4267
2006-08-21 21:00:00
nessus
nessus
vBulletin authorize.php x_invoice_num Parameter SQL Injection
2004-09-21 00:00:00
CubeCart < 3.0.12 Multiple Vulnerabilities (SQLi, XSS)
2006-08-17 00:00:00
cve
cve
CVE-2006-4267
2006-08-21 21:04:00
8.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.004 Low
EPSS
Percentile
74.1%
Related for CVE-2004-2695