NVD

Id
5986  
Name
CVE-2008-6255  
Description
Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-02-24  
Modified Date
2009-08-12  
Seq
2008-6255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
36084 5986 CVE-2008-6255 20081117 [waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4  View
36085 5986 CVE-2008-6255 http://www.waraxe.us/advisory-69.html  View
36086 5986 CVE-2008-6255 vbulletin-answer-extension-sql-injection(46682)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44416 JVNDB-2009-005423 vBulletin における SQL インジェクションの脆弱性 vBulletin には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6255 36368 CVE-2008-6255 5986 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005423.html 2009-02-24 2012-12-20 View