Vulnerability in Jelsoft Vbulletin
CVE-2004-1515
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
EPSS: 0.010 (59.7th percentile) — read the EPSS interpretation.
Affected products
- Jelsoft Vbulletin — versions 3.0.0, 3.0.0_beta_2, 3.0.0_can4
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)