CVE-2007-1292

Published: Mar 7, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almost impossible to achieve."

Affected (7)

Products: Jelsoft: Vbulletin

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Jelsoft Vbulletin	Up to 3.5.8
Jelsoft Vbulletin	Version 3.6.0
Jelsoft Vbulletin	Version 3.6.1
Jelsoft Vbulletin	Version 3.6.2
Jelsoft Vbulletin	Version 3.6.3
Jelsoft Vbulletin	Version 3.6.4
Jelsoft Vbulletin	Version 3.6.5

References (12)

http://osvdb.org/33835

Source: cve@mitre.org

http://secunia.com/advisories/24341

Source: cve@mitre.org

http://www.securityfocus.com/bid/22780

Source: cve@mitre.org

http://www.vbulletin.com/forum/showthread.php?postid=1314422

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32746

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3387

Source: cve@mitre.org

http://osvdb.org/33835

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24341

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22780

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vbulletin.com/forum/showthread.php?postid=1314422

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32746

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/3387

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.