CVE-2006-5104: SQL Injection
Published Oct 3, 2006
·Updated
SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL commands via the templatesused parameter.
Affected Software
5 affected components
Jelsoft vBulletin=2.3.0
Jelsoft vBulletin=2.3.2
Jelsoft vBulletin=2.3.3
Jelsoft vBulletin=2.3.4
Jelsoft vBulletin=2.3.8
Event History
Oct 3, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:03 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2006-5104?
CVE-2006-5104 is classified as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2006-5104?
To fix CVE-2006-5104, it is recommended to upgrade to a patched version of vBulletin that addresses this SQL injection vulnerability.
3
Which versions of vBulletin are affected by CVE-2006-5104?
CVE-2006-5104 affects vBulletin versions 2.3.0, 2.3.2, 2.3.3, 2.3.4, and 2.3.8.
4
What type of attacks can exploit CVE-2006-5104?
CVE-2006-5104 can be exploited by attackers using SQL injection techniques to manipulate database queries.
5
Is CVE-2006-5104 easy to exploit?
CVE-2006-5104 is considered easy to exploit, requiring only basic knowledge of SQL injection methods.