Lucene search

[email protected]CVE-2005-3019

HistorySep 21, 2005 - 10:03 p.m.

CVE-2005-3019

2005-09-2122:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

sql injection

vbulletin

remote attack

nvd

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.8%

JSON

Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) request parameter to joinrequests.php, (2) limitnumber or (3) limitstart to user.php, (4) usertitle.php, or (5) usertools.php.

CPENameOperatorVersion
jelsoft:vbulletinjelsoft vbulletineq2.2.0
jelsoft:vbulletinjelsoft vbulletineq2.0_rc2
jelsoft:vbulletinjelsoft vbulletineq3.0.4
jelsoft:vbulletinjelsoft vbulletineq3.0_beta_6
jelsoft:vbulletinjelsoft vbulletineq2.3.0
jelsoft:vbulletinjelsoft vbulletineq2.3.2
jelsoft:vbulletinjelsoft vbulletineq3.0.1
jelsoft:vbulletinjelsoft vbulletineq2.0_rc3
jelsoft:vbulletinjelsoft vbulletineq3.0.6
jelsoft:vbulletinjelsoft vbulletineq2.2.1

CPE	Name	Operator	Version
jelsoft:vbulletin	jelsoft vbulletin	eq	2.2.0
jelsoft:vbulletin	jelsoft vbulletin	eq	2.0_rc2
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.4
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0_beta_6
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.0
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.2
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.1
jelsoft:vbulletin	jelsoft vbulletin	eq	2.0_rc3
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.6
jelsoft:vbulletin	jelsoft vbulletin	eq	2.2.1

Rows per page:

1-10 of 341

References

marc.info/?l=bugtraq&m=112715150320677&w=2

morph3us.org/advisories/20050917-vbulletin-3.0.8.txt

secunia.com/advisories/16873/

www.securityfocus.com/bid/14872

exchange.xforce.ibmcloud.com/vulnerabilities/22323

8.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.8%

JSON

Related for CVE-2005-3019

nessus1