CVE-2007-1573: SQL Injection
Published Mar 21, 2007
·Updated
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached Before" field.
Affected Software
2 affected components
Jelsoft vBulletin<=3.6.5
Jelsoft vBulletin=3.6.4
Event History
Mar 21, 2007
CVE Published
09:19 PM
Mar 22, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1573?
CVE-2007-1573 is classified as a high severity vulnerability due to its potential for remote SQL injection.
2
How do I fix CVE-2007-1573?
To fix CVE-2007-1573, upgrade vBulletin to version 3.6.6 or later to eliminate the vulnerability.
3
Who is affected by CVE-2007-1573?
CVE-2007-1573 affects authenticated administrators using vBulletin versions 3.6.5 and 3.6.4.
4
What type of vulnerability is CVE-2007-1573?
CVE-2007-1573 is an SQL injection vulnerability that allows execution of arbitrary SQL commands.
5
Can CVE-2007-1573 be exploited remotely?
Yes, CVE-2007-1573 can be exploited remotely by authenticated administrators through the admincp/attachment.php script.