CVE-2004-2695

2007-10-0621:00:00

mitre

www.cve.org

8.1 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.5%

JSON

SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.

References

secunia.com/advisories/12531/

www.securiteam.com/unixfocus/5BP0E15E0M.html

www.securityfocus.com/bid/11193

www.vbulletin.com/forum/bugs.php?do=view&bugid=3379

www.vbulletin.com/forum/showthread.php?t=124876

exchange.xforce.ibmcloud.com/vulnerabilities/17365