What is CVE-2005-0511?

CVE-2005-0511 is a vulnerability in Jelsoft Vbulletin. Published 2005-02-21.

Is CVE-2005-0511 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Jelsoft Vbulletin

CVE-2005-0511

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.

EPSS: 0.358 (98.3th percentile) — read the EPSS interpretation.

Affected products

Jelsoft Vbulletin — versions 2.0, 2.0.1, 2.0.2
N/a — versions n/a

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2005-0511?: CVE-2005-0511 is a vulnerability in Jelsoft Vbulletin. Published 2005-02-21.
Is CVE-2005-0511 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.