NVD

Id
53490  
Name
CVE-2007-1292  
Description
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almost impossible to achieve."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-06  
Modified Date
2008-11-15  
Seq
2007-1292  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
270873 53490 CVE-2007-1292 3387  View
270874 53490 CVE-2007-1292 22780  View
270875 53490 CVE-2007-1292 http://www.vbulletin.com/forum/showthread.php?postid=1314422  View
270876 53490 CVE-2007-1292 vbulletin-inlinemod-sql-injection(32746)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54774 JVNDB-2007-003466 Jelsoft vBulletin の inlinemod.php における SQL インジェクションの脆弱性 Jelsoft vBulletin の inlinemod.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1292 24647 CVE-2007-1292 53490 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003466.html 2007-03-01 2012-09-25 View