CVE-2005-3024: SQL Injection

Published Sep 21, 2005

Updated

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, the (2) thread[forumid] or (3) criteria parameters to thread.php, (4) userid parameter to user.php, the (5) calendarcustomfieldid, (6) calendarid, (7) moderatorid, (8) holidayid, (9) calendarmoderatorid, or (10) calendar[0] parameters to admincalendar.php, (11) the cronid parameter to cronlog.php, (12) user[usergroupid][0] parameter to email.php, (13) help[0] parameter to help.php, the (14) limitnumber or (15) limitstart parameter to user.php, the (16) usertitleid or (17) ids parameters to usertitle.php, (18) rvt[0] parameter to language.php, (19) keep[0] parameter to phrase.php, (20) dostyleid parameter to template.php, (21) thread[forumid] parameter to thread.php, or (22) usertools.php.

Affected Software

33 affected components

Jelsoft vBulletin=1.0.1

Jelsoft vBulletin=2.0.3

Jelsoft vBulletin=2.0_rc2

Jelsoft vBulletin=2.0_rc3

Jelsoft vBulletin=2.2.0

Jelsoft vBulletin=2.2.1

Jelsoft vBulletin=2.2.2

Jelsoft vBulletin=2.2.3

Jelsoft vBulletin=2.2.4

Jelsoft vBulletin=2.2.5

Jelsoft vBulletin=2.2.6

Jelsoft vBulletin=2.2.7

Jelsoft vBulletin=2.2.8

Jelsoft vBulletin=2.2.9

Jelsoft vBulletin=2.3.0

Jelsoft vBulletin=2.3.2

Jelsoft vBulletin=2.3.3

Jelsoft vBulletin=2.3.4

Jelsoft vBulletin=3.0

Jelsoft vBulletin=3.0.1

Jelsoft vBulletin=3.0.2

Jelsoft vBulletin=3.0.3

Jelsoft vBulletin=3.0.4

Jelsoft vBulletin=3.0.5

Jelsoft vBulletin=3.0.6

Jelsoft vBulletin=3.0.7

Jelsoft vBulletin=3.0_beta_2

Jelsoft vBulletin=3.0_beta_3

Jelsoft vBulletin=3.0_beta_4

Jelsoft vBulletin=3.0_beta_5

Jelsoft vBulletin=3.0_beta_6

Jelsoft vBulletin=3.0_beta_7

Jelsoft vBulletin=3.0_gamma

Remediation

Patch Available

http://morph3us.org/advisories/20050917-vbulletin-3.0.7.txt

Event History

Sep 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3024?

CVE-2005-3024 is classified as a medium severity vulnerability due to its potential to allow attackers to execute arbitrary SQL commands.

How do I fix CVE-2005-3024?

To fix CVE-2005-3024, users should upgrade to vBulletin version 3.0.8 or later, which contains patches addressing these SQL injection vulnerabilities.

What versions of vBulletin are affected by CVE-2005-3024?

CVE-2005-3024 affects vBulletin versions 3.0.7 and earlier, as well as various earlier versions in the 2.x series.

What are the potential impacts of exploiting CVE-2005-3024?

Exploiting CVE-2005-3024 may allow attackers to manipulate the database, access sensitive data, or perform actions on behalf of legitimate users.

How can I determine if my vBulletin installation is vulnerable to CVE-2005-3024?

To determine if your vBulletin installation is vulnerable to CVE-2005-3024, check the version number against the known affected versions and review any security logs for suspicious activity.