VulnerabilityModified
CVE-2002-1660
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
HIGH 7.5EPSS 11.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 11.13% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- jelsoft/vbulletin
- Source
- cve@mitre.org
References
- http://securitytracker.com/id?1005284Exploit, Patch
- http://www.securiteam.com/exploits/5QP0P158AC.html
- http://www.securityfocus.com/bid/5820Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10176
- http://securitytracker.com/id?1005284Exploit, Patch
- http://www.securiteam.com/exploits/5QP0P158AC.html
- http://www.securityfocus.com/bid/5820Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/10176
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.