misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2005-02-23T05:00:00

Updated: 2016-10-17T13:57:01

Reserved: 2005-02-23T00:00:00


Link: CVE-2005-0511

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2005-02-21T05:00:00.000

Modified: 2016-10-18T03:12:16.370


Link: CVE-2005-0511

JSON object: View

cve-icon Redhat Information

No data.