PT-2004-1251 · Vbulletin · Vbulletin Forum

Mslug · Publicado 2004-01-20 · Atualizado 2017-10-10 · CVE-2004-0036

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions vBulletin Forum versions 2.3.x through 2.3.3

Description The issue allows remote attackers to steal sensitive information. It involves a SQL injection vulnerability in the calendar.php file, specifically via the eventid parameter.

Recommendations For vBulletin Forum versions 2.3.x through 2.3.3, update to version 2.3.4 to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0036

Produtos afetados

Vbulletin Forum

Referências · 7

• http://marc.info/?l=bugtraq&m=107340358202123&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14144 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0036 · Nota de Segurança
• http://osvdb.org/3344 · Nota
• http://securityfocus.com/bid/9360 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0036 · Nota
• http://vbulletin.com/forum/showthread.php?postid=588825 · Nota