Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-12720
HistoryMay 08, 2020 - 12:15 a.m.

CVE-2020-12720

2020-05-0800:15:12
CWE-306
CWE-89
[email protected]
web.nvd.nist.gov
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.833

Percentile

98.5%

JSON

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

Affected configurations

Nvd
Node
vbulletinvbulletinRange5.0.0–5.5.6
OR
vbulletinvbulletinMatch5.5.6-
OR
vbulletinvbulletinMatch5.6.0-
OR
vbulletinvbulletinMatch5.6.1.-
VendorProductVersionCPE
vbulletinvbulletin*cpe:2.3:a:vbulletin:vbulletin:*:*:*:*:*:*:*:*
vbulletinvbulletin5.5.6cpe:2.3:a:vbulletin:vbulletin:5.5.6:-:*:*:*:*:*:*
vbulletinvbulletin5.6.0cpe:2.3:a:vbulletin:vbulletin:5.6.0:-:*:*:*:*:*:*
vbulletinvbulletin5.6.1.-cpe:2.3:a:vbulletin:vbulletin:5.6.1.-:*:*:*:*:*:*:*

Related

thn 1
prion 1
dsquare 1
metasploit 2
checkpoint_advisories 1
cvelist 1
exploitdb 1
openvas 1
packetstorm 3
cve 1
nuclei 1
nessus 1
zdt 2
attackerkb 1
0daydb 3
thn
thn
An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now
2020-05-11 19:11:00
prion
prion
Improper access control
2020-05-08 00:15:00
dsquare
dsquare
vBulletin 5 SQL Injection
2020-06-25 00:00:00
metasploit
metasploit
vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection
2020-05-23 08:20:46
vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection
2020-05-23 08:20:46
checkpoint_advisories
checkpoint_advisories
vBulletin nodeId SQL Injection (CVE-2020-12720)
2020-05-18 00:00:00
cvelist
cvelist
CVE-2020-12720
2020-05-07 23:52:32
exploitdb
exploitdb
vBulletin 5.6.1 - 'nodeId' SQL Injection
2020-05-15 00:00:00
openvas
openvas
vBulletin < 5.6.1 Security Patch Level 1 Vulnerability
2020-05-11 00:00:00
packetstorm
packetstorm
vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection
2024-08-31 00:00:00
vBulletin 5.6.1 SQL Injection
2020-05-15 00:00:00
vBulletin 5.6.1 SQL Injection
2020-06-02 00:00:00
cve
cve
CVE-2020-12720
2020-05-08 00:15:12
nuclei
nuclei
vBulletin SQL Injection
2020-05-21 21:47:20
nessus
nessus
vBulletin 'getIndexableContent' SQL Injection (direct check)
2020-05-15 00:00:00
zdt
zdt
vBulletin 5.6.1 SQL Injection Exploit
2020-06-02 00:00:00
vBulletin 5.6.1 - (nodeId) SQL Injection Vulnerability
2020-05-15 00:00:00
attackerkb
attackerkb
CVE-2020-12720 vBulletin incorrect access control
2020-05-08 00:00:00
0daydb
0daydb
vCloud Director 9.7.0.15498291 CVE-2020-3956 - Remote Code Execution
2020-06-03 15:54:57
vBulletin 5.6.1 CVE-2020-12720 - SQL Injection
2020-06-03 15:53:27
QuickBox Pro 2.1.8 CVE-2020-13448 - Remote Code Execution
2020-06-03 15:51:53

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.833

Percentile

98.5%

JSON
Related for NVD:CVE-2020-12720
thn1prion1dsquare1metasploit2checkpoint_advisories1cvelist1exploitdb1openvas1packetstorm3cve1nuclei1nessus1zdt2attackerkb10daydb3