CVE-2007-2912: Jelsoft vBulletin

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user.

Affected products

• Jelsoft vBulletin: up to and including 3.6.4

Published 2007-05-30. Last modified 2026-06-16.