CVE-2005-0429

vBulletin <3.0.4 - Code Injection

Title source: llm

Description

Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.

Exploits (2)

exploitdb WORKING POC VERIFIED
by AL3NDALEEB · phpwebappsphp
https://www.exploit-db.com/exploits/820
exploitdb WORKING POC VERIFIED
by AL3NDALEEB · textwebappsphp
https://www.exploit-db.com/exploits/818

Scores

EPSS 0.0340
EPSS Percentile 87.4%

Details

Status published
Products (5)
jelsoft/vbulletin 3.0
jelsoft/vbulletin 3.0.1
jelsoft/vbulletin 3.0.2
jelsoft/vbulletin 3.0.3
jelsoft/vbulletin 3.0.4
Published May 02, 2005
Tracked Since Feb 18, 2026