PT-2005-3857 · Vbulletin · Vbulletin

Deluxe + 1 · Publicado 2005-09-21 · Atualizado 2017-07-11 · CVE-2005-3021

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions vBulletin versions 3.0.9 and earlier

Description The issue allows remote attackers with access to the administrator panel to upload arbitrary files. This is made possible through the image.php file in the vulnerable software.

Recommendations For versions 3.0.9 and earlier, consider restricting access to the administrator panel and the image.php file to minimize the risk of exploitation. As a temporary workaround, consider disabling the file upload functionality in the administrator panel until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-3021

Produtos afetados

Vbulletin

Referências · 6

• 🔥 http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3021 · Nota
• http://marc.info/?l=bugtraq&m=112715150320677&w=2 · Nota
• http://secunia.com/advisories/16873 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3021 · Nota de Segurança