VYPR
Unrated severityNVD Advisory· Published Jun 27, 2001· Updated Jun 16, 2026

CVE-2001-0475

CVE-2001-0475

Description

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.

Affected products

2
  • Jelsoft/Vbulletin2 versions
    cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*range: <=1.1.5
    • (no CPE)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.