CVE-2002-1660: Jelsoft vBulletin

High severity, CVSS 7.5. EPSS: 11.1% chance of exploitation in the next 30 days.

calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.

Affected products

• Jelsoft vBulletin: up to and including 2.1.9

Published 2002-12-31. Last modified 2026-06-16.