Nessus Plugin #11179

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

vBulletin's Calender Command Execution Vulnerability

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2002 SecurITeam

Summary:

vBulletin's Calender Command Execution Vulnerability

Version:

$Revision: 1.11 $

Cve_id:

CVE-2001-0475

Bugtraq_id:

2474

Xrefs:

-

Description:

A vulnerability in vBulletin enables attackers to craft special URLs
that will execute commands on the server through the vBulletin PHP
script.
For more information see: http://www.securiteam.com/securitynews/5IP0B203PI.html

Risk factor : High