Page 11 of 67 results (0.005 seconds)

CVSS: 4.3EPSS: 1%CPEs: 2EXPL: 4

CVE-2004-1823 – vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1823

Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php. • https://www.exploit-db.com/exploits/23822 https://www.exploit-db.com/exploits/23823 http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://secunia.com/advisories/11142 http://securitytracker.com/id?1009440 http://www.osvdb.org/4310 http://www.osvdb.org/4311 http://www.securityfocus.com/bid/9888 http://www.securityfocus.com/bid/9889 https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2004-2076 – vBulletin 3.0 - 'search.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-2076

Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. • https://www.exploit-db.com/exploits/23691 http://www.securityfocus.com/archive/1/353869 http://www.securityfocus.com/bid/9656 https://exchange.xforce.ibmcloud.com/vulnerabilities/15208 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 1

CVE-2004-1515 – vBulletin - 'LAST.php' SQL Injection

https://notcve.org/view.php?id=CVE-2004-1515

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. • https://www.exploit-db.com/exploits/631 http://marc.info/?l=bugtraq&m=110019198507100&w=2 •

CVSS: 4.3EPSS: 1%CPEs: 18EXPL: 2

CVE-2004-1824 – vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1824

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. • https://www.exploit-db.com/exploits/22030 http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://secunia.com/advisories/11142 http://securitytracker.com/id?1009440 http://www.iss.net/security_center/static/10679.php http://www.osvdb.org/4312 http://www.securityfocus.com/bid/6226 http://www.securityfocus.com/bid/9887 https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 •

CVSS: 7.5EPSS: 0%CPEs: 12EXPL: 0

CVE-2004-2695

https://notcve.org/view.php?id=CVE-2004-2695

SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267. • http://secunia.com/advisories/12531 http://www.securiteam.com/unixfocus/5BP0E15E0M.html http://www.securityfocus.com/bid/11193 http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379 http://www.vbulletin.com/forum/showthread.php?t=124876 https://exchange.xforce.ibmcloud.com/vulnerabilities/17365 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •