Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Mslug

#49676of 53,624
5Total CVSS
Vulnerabilities · 1
PT-2004-1251
5.0
2004-01-20
Vbulletin · Vbulletin Forum · CVE-2004-0036
**Name of the Vulnerable Software and Affected Versions** vBulletin Forum versions 2.3.x through 2.3.3 **Description** The issue allows remote attackers to steal sensitive information. It involves a SQL injection vulnerability in the calendar.php file, specifically via the `eventid` parameter. **Recommendations** For vBulletin Forum versions 2.3.x through 2.3.3, update to version 2.3.4 to resolve the issue.