2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2005-0511" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2005-02-21T05:00:00.000" ,
2024-11-21 23:11:37 +00:00
"lastModified" : "2024-11-20T23:55:18.150" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "misc.php for vBulletin 3.0.6 and earlier, when \"Add Template Name in HTML Comments\" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P" ,
2024-11-21 23:11:37 +00:00
"baseScore" : 7.5 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "PARTIAL" ,
2024-11-21 23:11:37 +00:00
"availabilityImpact" : "PARTIAL"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 6.4 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : true ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A81E1505-5F99-4DA8-AC0F-28F3E6F819C6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "818806B0-37B1-4CC2-A955-E711EC000203"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0394B9E0-FD26-4D5E-91D5-B8334B517DD3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "08DCDE86-03BD-4A61-9F3A-5EB05912A2D6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.0_beta_3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CCC9227A-1F12-4E93-AEA7-C44D6A6F4177"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "306C6BDF-C687-4B63-998B-B520DF1D1B1B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DF18ED7C-80BB-4A78-8809-9AAE817876A4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1D731A35-E0DB-4F40-A981-C38229A2EB1E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4053C8E5-5510-4814-A46E-89B81266C29D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8E6753AB-DFCF-4D40-8267-645810F7967E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B2B3772-A566-4A51-8B51-68E78C86CB08"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DAFBBAA9-BD46-44E3-9618-D87384E959A2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "747A57AD-A345-4F5B-AD82-0F7E08C2240E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "04E0702A-9235-45BE-82A8-BFD57A0DCC9E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD0914B4-24A9-438F-9B44-A6809D755168"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D66CAB0A-2A0A-47EF-A328-C341CCC1BA76"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_beta_2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3AFED411-1291-4E03-A160-CC9F1AD03D7B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0E9FE483-4367-47E7-9D09-043955998C8C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0BC85ED9-7491-43D3-B34D-1CB07836888F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "90BE006A-0F2D-4F3A-A335-176C5A5978E9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "151876D4-B72E-4D5F-A151-5A3DCAE51299"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "984E8E57-57E5-4FEC-9210-4083AD400F94"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1760CC7E-5297-4F8A-8A28-3689F6075CAE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "74013F50-0677-454E-8E6C-101CF210E989"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "29DC951B-860E-4AF1-8908-71C7099FB19A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0A4E9C82-64CF-4487-8947-ED745C41945A"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://marc.info/?l=bugtraq&m=110910899415763&w=2" ,
"source" : "cve@mitre.org"
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/14326" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.securityfocus.com/bid/12622" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://www.vbulletin.com/forum/showthread.php?postid=819562" ,
"source" : "cve@mitre.org"
2024-11-21 23:11:37 +00:00
} ,
{
"url" : "http://marc.info/?l=bugtraq&m=110910899415763&w=2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://secunia.com/advisories/14326" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/12622" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.vbulletin.com/forum/showthread.php?postid=819562" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
