CVE-2006-2018

CVE-2006-2018 is a SQL injection vulnerability in calendar.php of vBulletin 3.0.x where the eventid parameter enables remote attackers to execute arbitrary SQL. The entry notes that the affected version has been disputed by the vendor and associates this issue with CVE-2004-0036, which was fixed ...