PT-2001-1686 · Jelsoft · Vbulletin

Published 2001-06-27 · Updated 2017-10-10 · CVE-2001-0475

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions vBulletin version not specified

Description The issue is related to the improper initialization of a PHP variable used to store template information in the index.php file of Jelsoft vBulletin. This allows remote attackers to execute arbitrary PHP code by including special characters in the templatecache parameter.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0475

Affected Products

Vbulletin

References · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0475 · Security Note
• http://securityfocus.com/bid/2474 · Vendor Advisory
• http://vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0475 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6237 · Note