Lucene search

PRIOn knowledge basePRION:CVE-2007-2911

HistoryMay 30, 2007 - 10:30 a.m.

Sql injection

2007-05-3010:30:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.9%

JSON

SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the “Attached After” field (GPC[‘search’][‘datelineafter’] variable), a related issue to CVE-2007-1573.

CPENameOperatorVersion
vbulletinle3.6.5

CPE	Name	Operator	Version
	vbulletin	le	3.6.5

References

osvdb.org/38147

www.vbulletin.com/forum/project.php?issueid=21615

exchange.xforce.ibmcloud.com/vulnerabilities/34784

8.3 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for PRION:CVE-2007-2911