CVE-2006-4272
- State
- Published
- Severity
- Not scored
- Published
- Aug 21, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 21, 2006
Description
Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) via a large number of requests to register.php. NOTE: the vendor has disputed this vulnerability, stating "If you have the CAPTCHA enabled then the registrations wont even go through. ... if you are talking about the flood being allowed in the first place then surely this is something that should be handled at the server level.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20060818 Re: UPDATE vBulletin Version 3.5.4 exploitmailing-list
- 20060815 UPDATE vBulletin Version 3.5.4 exploitmailing-list
- 1426third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.