Skip to content
Noroxi

jelsoft records

60 published records for vendor jelsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 1.7%
Pre-auth RCE
19
With a fix record
1.7%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    60 records
    • CVE-2005-0511
      41Plan

      misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary

      HighCVSS 7.5WeaponizedEPSS 35%

      jelsoft · vbulletinFeb 21, 2005

    • CVE-2007-4120
      38Monitor

      Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL

      CriticalCVSS 9.3No exploitEPSS 2%

      jelsoft · vbulletinAug 1, 2007

    • CVE-2007-2911
      34Monitor

      SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execut

      HighCVSS 8.5No exploitEPSS 1%

      jelsoft · vbulletinMay 30, 2007

    • CVE-2002-1660
      33Monitor

      calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command paramet

      HighCVSS 7.5Proof of conceptEPSS 11%

      jelsoft · vbulletinDec 31, 2002

    • CVE-2005-3019
      31Monitor

      Multiple SQL injection vulnerabilities in vBulletin before 3.0.9 allow remote attackers to execute arbitrary SQL commands via the (1) reques

      HighCVSS 7.5Proof of conceptEPSS 3%

      jelsoft · vbulletinSep 21, 2005

    • CVE-2001-0475
      31Monitor

      index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote a

      HighCVSS 7.5No exploitEPSS 2%

      jelsoft · vbulletinJun 27, 2001

    • CVE-2006-4271
      31Monitor

      PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary P

      HighCVSS 7.5No exploitEPSS 2%

      jelsoft · vbulletinAug 21, 2006

    • CVE-2006-1382
      31Monitor

      PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows rem

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · impexMar 24, 2006

    • CVE-2004-2695
      31Monitor

      SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows r

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbulletinDec 31, 2004

    • CVE-2006-4272
      30Monitor

      Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) vi

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbulletinAug 21, 2006

    • CVE-2007-1292
      30Monitor

      SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote aut

      HighCVSS 7.5Proof of conceptEPSS 1%

      jelsoft · vbulletinMar 6, 2007

    • CVE-2005-3024
      30Monitor

      Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) a

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbulletinSep 21, 2005

    • CVE-2005-3022
      30Monitor

      Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) a

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbulletinSep 21, 2005

    • CVE-2006-2018
      30Monitor

      SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid par

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbulletinApr 25, 2006

    • CVE-2007-3196
      30Monitor

      SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL com

      HighCVSS 7.5Proof of conceptEPSS 1%

      jelsoft · vbsupport integrated ticket systemJun 12, 2007

    • CVE-2006-5104
      30Monitor

      SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL commands via the templat

      HighCVSS 7.5Proof of conceptEPSS 1%

      jelsoft · vbulletinOct 3, 2006

    • CVE-2004-1515
      30Monitor

      SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL stateme

      HighCVSS 7.5Proof of conceptEPSS 1%

      jelsoft · vbulletinDec 31, 2004

    • CVE-2007-3197
      30Monitor

      SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unsp

      HighCVSS 7.5No exploitEPSS 1%

      jelsoft · vbsupport integrated ticket systemJun 12, 2007

    • CVE-2006-6779
      28Monitor

      Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file

      MediumCVSS 6.8Proof of conceptEPSS 3%

      jelsoft · vbulletinDec 27, 2006

    • CVE-2006-6040
      28Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitra

      MediumCVSS 6.8Proof of conceptEPSS 2%

      jelsoft · vbulletinNov 21, 2006

    • CVE-2006-4273
      28Monitor

      Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML

      MediumCVSS 6.8Proof of conceptEPSS 2%

      jelsoft · vbulletinAug 21, 2006

    • CVE-2006-2335
      27Monitor

      Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrator

      MediumCVSS 6.5No exploitEPSS 3%

      jelsoft · vbulletinMay 11, 2006

    • CVE-2003-0295
      27Monitor

      Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script an

      MediumCVSS 6.8Proof of conceptEPSS 1%

      jelsoft · vbulletinJun 16, 2003

    • CVE-2007-1573
      24Monitor

      SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbit

      MediumCVSS 6.0No exploitEPSS 0%

      jelsoft · vbulletinMar 21, 2007

    • CVE-2007-3326
      23Monitor

      Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a .

      MediumCVSS 5.8No exploitEPSS 1%

      jelsoft · vbulletinJun 21, 2007