CVE-2005-3021Vbulletin vulnerability

2 documents2 sources
Severity
2.1LOWNVD
EPSS
0.2%
top 58.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 21
Latest updateMay 1

Description

image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

NVDjelsoft/vbulletin35 versions+34

Patches

🔴Vulnerability Details

1
GHSA
GHSA-m87c-vwp5-ww6f: image2022-05-01