CVE-2001-0475

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2474Vendor Advisory
http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6237
http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.htmlExploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/2474Vendor Advisory
http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6237

Timeline

Published: Jun 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04767.5Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands vi CVE-2001-04777.5Vulnerability in WebCalendar 0.9.26 allows remote command execution.CVE-2001-04787.5Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot d CVE-2001-04797.5Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot d CVE-2001-04805.0Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in t CVE-2001-04817.2Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.CVE-2001-04827.2Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or e CVE-2001-04837.5Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources whe CVE-2001-04846.4Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml,CVE-2001-04857.2Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitr CVE-2001-04865.0Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.CVE-2001-04875.0AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.