PT-2005-3857 · Vbulletin · Vbulletin

Deluxe + 1 · Published 2005-09-21 · Updated 2017-07-11 · CVE-2005-3021

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions vBulletin versions 3.0.9 and earlier

Description The issue allows remote attackers with access to the administrator panel to upload arbitrary files. This is made possible through the image.php file in the vulnerable software.

Recommendations For versions 3.0.9 and earlier, consider restricting access to the administrator panel and the image.php file to minimize the risk of exploitation. As a temporary workaround, consider disabling the file upload functionality in the administrator panel until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2005-3021

Affected Products

Vbulletin

References · 6

• 🔥 http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt · Exploit
• http://secunia.com/advisories/16873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3021 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3021 · Note
• http://marc.info/?l=bugtraq&m=112715150320677&w=2 · Note