CVE-2004-2695
published 2004-12-31CVE-2004-2695: SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to…
PriorityP430high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.91%
77.2th percentile
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| jelsoft | vbulletin | — | — |
| point-to-point_protocol_project | point-to-point_protocol | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/12531/http://www.securiteam.com/unixfocus/5BP0E15E0M.htmlhttp://www.securityfocus.com/bid/11193http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379http://www.vbulletin.com/forum/showthread.php?t=124876https://exchange.xforce.ibmcloud.com/vulnerabilities/17365http://secunia.com/advisories/12531/http://www.securiteam.com/unixfocus/5BP0E15E0M.htmlhttp://www.securityfocus.com/bid/11193http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379http://www.vbulletin.com/forum/showthread.php?t=124876https://exchange.xforce.ibmcloud.com/vulnerabilities/17365
2004-12-31
Published