CVE-2006-4271

PHP remote file inclusion vulnerability in install/upgrade301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the...

CVE-2006-4271

CVE-2006-4271 is a PHP remote file inclusion in vBulletin 3.5.4, triggered via the step parameter in install/upgrade_301.php (or install/upgrade 301.php), allowing arbitrary PHP code execution. The vendor disputes the flaw, noting authentication is required before using the upgrade system. Connec...

CVE-2006-4271

PHP remote file inclusion vulnerability in install/upgrade301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the...