CVE-2005-0429: Jelsoft vBulletin

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter.

Affected products

• Jelsoft vBulletin: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only

Published 2005-05-02. Last modified 2026-06-16.