Vulnerabilities > CVE-2006-2805 - SQL Injection vulnerability in Jelsoft Vbulletin 3.0.10

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
jelsoft
exploit available
NVD
Published: 2006-06-03
Updated: 2008-09-05

Summary

SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter.

Vulnerable Configurations

Part Description Count
Application
Jelsoft
1

Exploit-Db

descriptionvBulletin 3.0.10 Portal.PHP SQL Injection Vulnerability. CVE-2006-2805. Webapps exploit for php platform
idEDB-ID:27929
last seen2016-02-03
modified2006-05-31
published2006-05-31
reporterSpC-x
sourcehttps://www.exploit-db.com/download/27929/
titlevBulletin 3.0.10 Portal.PHP SQL Injection Vulnerability

References