Vulnerability in N/a
CVE-2005-0511
misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.
EPSS: 0.808 (99.2th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 14326 (x_refsource_SECUNIA, third-party-advisory)
- www.vbulletin.com/forum/showthread.php (x_refsource_CONFIRM)
- 20050222 [SCAN Associates Security Advisory] vbulletin 3.0.6 and below php code injection (mailing-list, x_refsource_BUGTRAQ)
- 12622 (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2005-0511?
- CVE-2005-0511 is a vulnerability in N/a. Published 2005-02-23.
- Is CVE-2005-0511 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.