Approved changes feed: RSS · Atom
cpe:2.3:a:jelsoft:vbulletin:3.5.8:*:*:*:*:*:*:*
part: a version: 3.5.8 update: *
| Vendor | Jelsoft (a1aea8a5-a68d-5cee-b31b-dd71f1d6156f) |
|---|---|
| Product | Vbulletin (6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2335 |
vulnerable | 2026-06-08 04:49:06.350862 |
Details available
Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed. NOTE: the vendor was unable to reproduce this issue in 3.5.x. NOTE: this issue might be due to direct static code injection.
Published: 2006-05-12T00:00:00.000Z
Updated: 2024-08-07T17:43:29.316Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.