CVE-2008-6255

no score yetEPSS 0.9%

vbulletin vbulletin: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2009-02-24
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

vbulletin:vbulletin

References

http://secunia.com/advisories/32775
http://www.securityfocus.com/archive/1/498390/100/0/threaded
http://www.waraxe.us/advisory-69.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/46682
http://secunia.com/advisories/32775

Check your stack JSON