Lucene search

[email protected]CVE-2006-5104

HistoryOct 03, 2006 - 4:03 a.m.

CVE-2006-5104

2006-10-0304:03:00

[email protected]

web.nvd.nist.gov

cve-2006-5104

sql injection

jelsoft

vbulletin

global.php

remote attack

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL commands via the templatesused parameter.

Affected configurations

NVD

Node

jelsoftvbulletinMatch2.3.0

jelsoftvbulletinMatch2.3.2

jelsoftvbulletinMatch2.3.3

jelsoftvbulletinMatch2.3.4

jelsoftvbulletinMatch2.3.8

CPENameOperatorVersion
jelsoft:vbulletinjelsoft vbulletineq2.3.0
jelsoft:vbulletinjelsoft vbulletineq2.3.2
jelsoft:vbulletinjelsoft vbulletineq2.3.3
jelsoft:vbulletinjelsoft vbulletineq2.3.4
jelsoft:vbulletinjelsoft vbulletineq2.3.8

CPE	Name	Operator	Version
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.0
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.2
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.3
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.4
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.8

References

securityreason.com/securityalert/1661

www.securityfocus.com/archive/1/447010/100/0/threaded

www.securityfocus.com/bid/20214

exchange.xforce.ibmcloud.com/vulnerabilities/29174

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.2%

JSON

Related for CVE-2006-5104

cvelist1 nvd1