PT-2004-1251 · Vbulletin · Vbulletin Forum

Mslug · Published 2004-01-20 · Updated 2017-10-10 · CVE-2004-0036

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions vBulletin Forum versions 2.3.x through 2.3.3

Description The issue allows remote attackers to steal sensitive information. It involves a SQL injection vulnerability in the calendar.php file, specifically via the eventid parameter.

Recommendations For vBulletin Forum versions 2.3.x through 2.3.3, update to version 2.3.4 to resolve the issue.

Fix

Related Identifiers

CVE-2004-0036

Affected Products

Vbulletin Forum

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-0036 · Security Note
• http://marc.info/?l=bugtraq&m=107340358202123&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14144 · Note
• http://osvdb.org/3344 · Note
• http://securityfocus.com/bid/9360 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0036 · Note
• http://vbulletin.com/forum/showthread.php?postid=588825 · Note