CVE-2004-0036: Jelsoft vBulletin

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.

Affected products

• Jelsoft vBulletin: version 2.3.0 only

Published 2004-01-20. Last modified 2026-06-16.