medium5.0Public exploit code
CVE-2005-0429
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inje…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (2)2005-02-15 · webapps · php · Verified
- vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1)2005-02-14 · webapps · php · Verified
Impact
Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jelsoft | Vbulletin | Versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4 |