CVE-2005-3021: Jelsoft vBulletin

Low severity, CVSS 2.1. EPSS: 0.9% chance of exploitation in the next 30 days.

image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.

Affected products

• Jelsoft vBulletin: version 1.0.1 only; version 2.0.3 only; version 2.0_rc2 only; version 2.0_rc3 only; version 2.2.0 only; version 2.2.1 only; …

Published 2005-09-21. Last modified 2026-06-16.