Unscored CVE-2006-2018 EUVD-2006-2019GHSA-92p6-r57c-hr4v

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid pa…

Published Apr 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4.

References

20060424 Re: vbulletin<--3.0.x SQL Injection mailing-list
20060423 vbulletin<--3.0.x SQL Injection mailing-list