vBulletin Showthread.PHP Input Validation Vulnerability

Bugtraq ID:	16514
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2006 12:00AM
Updated:	Jun 21 2006 06:20PM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	VBulletin VBulletin 3.5.3 VBulletin VBulletin 3.5.2 VBulletin VBulletin 3.5.1 VBulletin VBulletin 3.0.9 VBulletin VBulletin 3.0.8 VBulletin VBulletin 3.0.7
Not Vulnerable:

vBulletin Showthread.PHP Input Validation Vulnerability

vBulletin is prone to an unspecified input-validation vulnerability.

Very little is known about this vulnerability; this BID will be updated when details become available.

Versions 3.0.7 through 3.5.3 are vulnerable; other versions may also be affected.

vBulletin Showthread.PHP Input Validation Vulnerability

No exploit is required.

vBulletin Showthread.PHP Input Validation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

vBulletin Showthread.PHP Input Validation Vulnerability

References:

• Vendor Homepage (Kyberna)
  
• Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4). ([email protected])