CVE-2004-0036: SQL Injection
Published Jan 20, 2004
·Updated
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.
Affected Software
1 affected component
Jelsoft vBulletin=2.3.0
Event History
Jan 20, 2004
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0036?
CVE-2004-0036 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.
2
How do I fix CVE-2004-0036?
To fix CVE-2004-0036, update your vBulletin Forum to version 2.3.4 or later.
3
What type of attack is CVE-2004-0036 associated with?
CVE-2004-0036 is associated with SQL injection attacks targeting the eventid parameter.
4
Which version of vBulletin is vulnerable to CVE-2004-0036?
vBulletin Forum versions 2.3.x before 2.3.4 are vulnerable to CVE-2004-0036.
5
Can CVE-2004-0036 lead to data breaches?
Yes, CVE-2004-0036 can lead to data breaches by allowing attackers to steal sensitive information from the database.