Vbulletin Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/vbulletin/ Sun, 26 Feb 2023 09:10:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Vbulletin Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/vbulletin/ 32 32 CVE-2008-4706 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4706/ Sun, 26 Feb 2023 09:10:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4706/ SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.

The post CVE-2008-4706 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.

The post CVE-2008-4706 appeared first on CVE Vulnerability.

]]> CVE-2023-25135 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25135/ Fri, 03 Feb 2023 12:10:07 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25135 vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

The post CVE-2023-25135 appeared first on CVE Vulnerability.

]]> vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers deserialization. This occurs because verify_serialized checks that a value is serialized by calling unserialize and then checking for errors. The fixed versions are 5.6.7 PL1, 5.6.8 PL1, and 5.6.9 PL1.

The post CVE-2023-25135 appeared first on CVE Vulnerability.

]]>