CVE-2008-6255: SQL Injection
Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6255?
CVE-2008-6255 is considered to have a high severity due to its potential for remote SQL injection.
How do I fix CVE-2008-6255?
To resolve CVE-2008-6255, it's recommended to upgrade vBulletin to a version that addresses these SQL injection vulnerabilities.
What software is affected by CVE-2008-6255?
CVE-2008-6255 specifically affects vBulletin version 3.7.4.
What are the attack vectors for CVE-2008-6255?
The attack vectors for CVE-2008-6255 include manipulated parameters in admin control scripts such as admincp/verify.php and admincp/attachmentpermission.php.
Who can exploit CVE-2008-6255?
CVE-2008-6255 can be exploited by remote authenticated administrators, allowing them to execute arbitrary SQL commands.