CVE-2005-0511

Published: Feb 21, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.

Affected (29)

Products: Jelsoft: Vbulletin

Jelsoft

1 product

Vbulletin

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Jelsoft Vbulletin	Version 2.0.1
Jelsoft Vbulletin	Version 2.0.2
Jelsoft Vbulletin	Version 2.0
Jelsoft Vbulletin	Version 2.0_beta_2
Jelsoft Vbulletin	Version 2.0_beta_3
Jelsoft Vbulletin	Version 2.2.0
Jelsoft Vbulletin	Version 2.2.1
Jelsoft Vbulletin	Version 2.2.2
Jelsoft Vbulletin	Version 2.2.3
Jelsoft Vbulletin	Version 2.2.4
Jelsoft Vbulletin	Version 2.2.5
Jelsoft Vbulletin	Version 2.2.6
Jelsoft Vbulletin	Version 2.2.7
Jelsoft Vbulletin	Version 2.2.8
Jelsoft Vbulletin	Version 2.2.9_can
Jelsoft Vbulletin	Version 2.3.0
Jelsoft Vbulletin	Version 2.3.3
Jelsoft Vbulletin	Version 2.3.4
Jelsoft Vbulletin	Version 3.0.0
Jelsoft Vbulletin	Version 3.0.0_beta_2
Jelsoft Vbulletin	Version 3.0.0_can4
Jelsoft Vbulletin	Version 3.0.0_rc4
Jelsoft Vbulletin	Version 3.0.1
Jelsoft Vbulletin	Version 3.0.2
Jelsoft Vbulletin	Version 3.0.3
Jelsoft Vbulletin	Version 3.0.4
Jelsoft Vbulletin	Version 3.0.5
Jelsoft Vbulletin	Version 3.0.6
Jelsoft Vbulletin	Version 3.0_beta_2