← Back

CVE-2004-1515

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.

Affected (11)

Products: Jelsoft: Vbulletin
1 product
Vbulletin
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Jelsoft
Version 3.0.0
Version 3.0.0_beta_2
Version 3.0.0_can4
Version 3.0.0_rc4
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.0.4
Version 3.0.5
Version 3.0.6
Version 3.0_beta_2

References (2)

Timeline

No history available yet.