Description
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.
References
- vbulletin-calendar-sql-injection(14144) vdb-entry
- 9360 vdb-entry
- 3344 vdb-entry
- http://www.vbulletin.com/forum/showthread.php?postid=588825
- 20040105 vBulletin Forum 2.3.xx calendar.php SQL Injection mailing-list