CVE-2001-0475

Опубликовано: 27 июн. 2001

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2474
Vendor Advisory
http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6237
http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/2474
Vendor Advisory
http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6237

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*

Версия до 1.1.5 (включая)

cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*

Версия до 2.0_beta_2 (включая)

EPSS

Процентиль: 77%

0.0108

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9p38-h93c-5h77

github

почти 4 года назад