CVE

Id
20375  
CVE No.
CVE-2006-4271  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the usage of the upgrade system."  
Phase
Assigned (20060821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
189520 20375 CVE-2006-4271 BUGTRAQ:20060705 vBulletin 3.5.4 (install_path) Exploit  View
189521 20375 CVE-2006-4271 URL:http://archives.neohapsis.com/archives/bugtraq/2006-07/0061.html  View
189522 20375 CVE-2006-4271 BUGTRAQ:20060705 Re: vBulletin 3.5.4 (install_path) Exploit  View
189523 20375 CVE-2006-4271 URL:http://archives.neohapsis.com/archives/bugtraq/2006-07/0069.html  View
189524 20375 CVE-2006-4271 BUGTRAQ:20060708 Re: Re: vBulletin 3.5.4 (install_path) Exploit  View
189525 20375 CVE-2006-4271 URL:http://archives.neohapsis.com/archives/bugtraq/2006-07/0121.html  View
189526 20375 CVE-2006-4271 BUGTRAQ:20060711 RE: Re: vBulletin 3.5.4 (install_path) Exploit  View
189527 20375 CVE-2006-4271 URL:http://archives.neohapsis.com/archives/bugtraq/2006-07/0217.html  View
189528 20375 CVE-2006-4271 MISC:http://www.pldsoft.com/forum/showthread.php?t=1340  View
189529 20375 CVE-2006-4271 OSVDB:28210  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59715 JVNDB-2006-001981 Jelsoft vBulletin におけるクロスサイトスクリプティングの脆弱性 Jelsoft vBulletin には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-4273 20375 6.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001981.html  View