CVE-2005-0511

Description

misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0512

http://www.vbulletin.com/forum/showthread.php?postid=819562

http://www.securityfocus.com/bid/12622

http://secunia.com/advisories/14326

http://marc.info/?l=bugtraq&m=110910899415763&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS