Total vulnerabilities in the database
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.
Software | From | Fixed in |
---|---|---|
jelsoft / vbulletin | - | 1.1.5.x |
jelsoft / vbulletin | - | 2.0_beta_2.x |