CVE-2008-4706: vBulletin Vbgooglemap

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.

Affected products

• vBulletin Vbgooglemap: version 1.0.3 only

Published 2008-10-23. Last modified 2026-06-16.