Sql injection

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...

CVE-2008-6256

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...

CVE-2008-6256

CVE-2008-6256 affects vBulletin up to 3.7.3.pl1 (admincalendar.php). The vulnerability is an SQL injection in admincp/admincalendar.php via the holidayinfo[recurring] parameter, allowing remote authenticated administrators with calendar access to execute arbitrary SQL commands. OpenVAS corroborat...

CVE-2008-6256: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...

CVE-2005-3023: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to 1 announcement.php, 2 admincalendar.php, 3 bbcode.php, 4 cronadmin.php, 5 email.php, 6 faq.php, 7 forum.php, 8 image.php, 9...

CVE-2005-3022: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, 2 userid parameter to user.php, 3 calendar parameter to admincalendar.php, 4 cronid parameter to cronlog.php, 5...