CVE-2006-4272: jelsoft vbulletin
Vulnerability summary
CVE-2006-4272 is a high (CVSS 7.5) vulnerability in jelsoft vbulletin. EPSS estimates a 1.54% chance of exploitation in the next 30 days, higher than 74.6% of scored vulnerabilities.
Timeline
- 21-08-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) via a large number of requests to register.php. NOTE: the vendor has disputed this vulnerability, stating "If you have the CAPTCHA enabled then the registrations wont even go through. ... if you are talking about the flood being allowed in the first place then surely this is something that should be handled at the server level.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.54%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.54% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Jelsoft1 product
- vbulletin3.5.4
1 vendor · 1 product