Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2695
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.016
Percentile
87.5%
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.
Affected configurations
Node
jelsoftvbulletinMatch3.0
ORjelsoftvbulletinMatch3.0.1
ORjelsoftvbulletinMatch3.0.2
ORjelsoftvbulletinMatch3.0.3
ORjelsoftvbulletinMatch3.0_beta_2
ORjelsoftvbulletinMatch3.0_beta_3
ORjelsoftvbulletinMatch3.0_beta_4
ORjelsoftvbulletinMatch3.0_beta_5
ORjelsoftvbulletinMatch3.0_beta_6
ORjelsoftvbulletinMatch3.0_beta_7
ORjelsoftvbulletinMatch3.0_gamma
ORpoint-to-point_protocol_projectpoint-to-point_protocolMatch2.4.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jelsoft | vbulletin | 3.0 | cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0.1 | cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0.2 | cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0.3 | cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_2 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_3 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_4 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_5 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_6 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:* |
| jelsoft | vbulletin | 3.0_beta_7 | cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2004-2695
2007-10-06 21:00:00
CVE-2006-4267
2006-08-21 21:00:00
cve
cve
CVE-2004-2695
2007-10-06 21:00:00
CVE-2006-4267
2006-08-21 21:04:00
nessus
nessus
vBulletin authorize.php x_invoice_num Parameter SQL Injection
2004-09-21 00:00:00
CubeCart < 3.0.12 Multiple Vulnerabilities (SQLi, XSS)
2006-08-17 00:00:00
nvd
nvd
CVE-2006-4267
2006-08-21 21:04:00
exploitdb
exploitdb
CubeCart 3.0.11 - 'oid' Blind SQL Injection
2006-08-17 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
Low
EPSS
0.016
Percentile
87.5%
Related for NVD:CVE-2004-2695