Total vulnerabilities in the database
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.
| Software | From | Fixed in |
|---|---|---|
| jelsoft / vbulletin | 3.0_beta_6 | 3.0_beta_6.x |
| jelsoft / vbulletin | 3.0.1 | 3.0.1.x |
| jelsoft / vbulletin | 3.0_beta_7 | 3.0_beta_7.x |
| jelsoft / vbulletin | 3.0_beta_3 | 3.0_beta_3.x |
| jelsoft / vbulletin | 3.0_beta_2 | 3.0_beta_2.x |
| jelsoft / vbulletin | 3.0.2 | 3.0.2.x |
| jelsoft / vbulletin | 3.0_gamma | 3.0_gamma.x |
| jelsoft / vbulletin | 3.0_beta_4 | 3.0_beta_4.x |
| jelsoft / vbulletin | 3.0.3 | 3.0.3.x |
| jelsoft / vbulletin | 3.0 | 3.0.x |
| jelsoft / vbulletin | 3.0_beta_5 | 3.0_beta_5.x |
| point-to-point_protocol_project / point-to-point_protocol | 2.4.1 | 2.4.1.x |