CVE-2014-5102
Published Jul 25, 2014
Last updated 9 years ago
Overview
- Description
- SQL injection vulnerability in vBulletin 5.0.4 through 5.1.3 Alpha 5 allows remote attackers to execute arbitrary SQL commands via the criteria[startswith] parameter to ajax/render/memberlist_items.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-89
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6A94474-EB3E-45B8-8790-75554BB1F068"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "607D650E-AFEB-47F8-90C1-C8BA132659C7"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C77C657C-3C09-47AE-8FEC-18556FDEB040"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CA8DD4F-85CE-4598-8968-87B839DF25EC"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BB7F7A4-1AFD-4391-B53C-07F1C9EE7A07"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE2B6D53-270C-48BB-B3D0-DDB8E700290D"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.2:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2737015A-6FBC-4B64-9BE3-A1570B095D06"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB60E2A1-CE50-49FF-AFA3-25BD72AE2A4E"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.2:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78BB8D71-5348-4879-A6DD-8AE599719F57"
},
{
"criteria": "cpe:2.3:a:vbulletin:vbulletin:5.1.3:alpha5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9A3CE21-9777-45C0-B239-BFA0DE8F2375"
}
],
"operator": "OR"
}
]
}
]