image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.
                
            References
                    | Link | Resource | 
|---|---|
| http://marc.info/?l=bugtraq&m=112715150320677&w=2 | |
| http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt | Exploit Patch Vendor Advisory | 
| http://secunia.com/advisories/16873/ | Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 | |
| http://marc.info/?l=bugtraq&m=112715150320677&w=2 | |
| http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt | Exploit Patch Vendor Advisory | 
| http://secunia.com/advisories/16873/ | Patch Vendor Advisory | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 00:00
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://marc.info/?l=bugtraq&m=112715150320677&w=2 - | |
| References | () http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt - Exploit, Patch, Vendor Advisory | |
| References | () http://secunia.com/advisories/16873/ - Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/22325 - | 
Information
                Published : 2005-09-21 22:03
Updated : 2025-04-03 01:03
NVD link : CVE-2005-3021
Mitre link : CVE-2005-3021
CVE.ORG link : CVE-2005-3021
JSON object : View
Products Affected
                jelsoft
- vbulletin
CWE
                