CVE-2004-2695

HIGH · CVSS 7.5 EPSS 1.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2004-2695

Severity

HIGH

CVSS

7.5

EPSS

1.91%

Original NVD Description

SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267.