NVD

Id
32880  
Name
CVE-2014-5102  
Description
SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-07-25  
Modified Date
2015-10-05  
Seq
2014-5102  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172675 32880 CVE-2014-5102 http://packetstormsecurity.com/files/127537/vBulletin-5.1.2-SQL-Injection.html  View
172676 32880 CVE-2014-5102 http://www.pcworld.com/article/2455500/emergency-vbulletin-patch-fixes-dangerous-sql-injection-vulnerability.html  View
172677 32880 CVE-2014-5102 68709  View
172678 32880 CVE-2014-5102 http://www.vbulletin.com/forum/forum/vbulletin-announcements/vbulletin-announcements_aa/4097503-security-patch-release-for-vbulletin-5-0-4-5-0-5-5-1-0-5-1-1-and-5-1-2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14705 JVNDB-2014-003580 vBulletin における SQL インジェクションの脆弱性 vBulletin には、SQL インジェクションの脆弱性が存在します。 CVE-2014-5102 72391 CVE-2014-5102 32880 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003580.html 2014-07-16 2014-07-29 View