CVE-2004-1515 SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jelsoft vbulletin | = 3.0.0 | No fix listed |
| jelsoft vbulletin | = 3.0.0_beta_2 | No fix listed |
| jelsoft vbulletin | = 3.0.0_can4 | No fix listed |
| jelsoft vbulletin | = 3.0.0_rc4 | No fix listed |
| jelsoft vbulletin | = 3.0.1 | No fix listed |
| jelsoft vbulletin | = 3.0.2 | No fix listed |
| jelsoft vbulletin | = 3.0.3 | No fix listed |
| jelsoft vbulletin | = 3.0.4 | No fix listed |
| jelsoft vbulletin | = 3.0.5 | No fix listed |
| jelsoft vbulletin | = 3.0.6 | No fix listed |
| jelsoft vbulletin | = 3.0_beta_2 | No fix listed |