CVE-2006-2018 | BDVDB-2026-16519 Detail

Description#

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/431951/30/5370/threaded
http://www.securityfocus.com/archive/1/431901

Exploit#

No public exploit known

History#

Version 12006-04-25Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.