Page 14 of 79 results (0.016 seconds)

CVSS: 4.3EPSS: 1%CPEs: 18EXPL: 2

CVE-2004-1824 – vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1824

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. • https://www.exploit-db.com/exploits/22030 http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://secunia.com/advisories/11142 http://securitytracker.com/id?1009440 http://www.iss.net/security_center/static/10679.php http://www.osvdb.org/4312 http://www.securityfocus.com/bid/6226 http://www.securityfocus.com/bid/9887 https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 •

CVSS: 4.3EPSS: 0%CPEs: 25EXPL: 2

CVE-2004-2288 – vBulletin 1.0/2.x/3.0 - 'index.php' User Interface Spoofing

https://notcve.org/view.php?id=CVE-2004-2288

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter. • https://www.exploit-db.com/exploits/24124 http://www.infosecurity.org.cn/article/hacker/exploit/16557.html http://www.securityfocus.com/bid/10362 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2004-2076 – vBulletin 3.0 - 'search.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-2076

Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. • https://www.exploit-db.com/exploits/23691 http://www.securityfocus.com/archive/1/353869 http://www.securityfocus.com/bid/9656 https://exchange.xforce.ibmcloud.com/vulnerabilities/15208 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2

CVE-2004-0620 – vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-0620

Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) newreply.php o (2) newthread.php en vBulletin 3.0.1 permite a atacantes remotos inyectar HTML arbitrario o script como otros usuarios mediante el panel edición. • https://www.exploit-db.com/exploits/24234 http://marc.info/?l=bugtraq&m=108809720026642&w=2 http://www.securityfocus.com/bid/10602 https://exchange.xforce.ibmcloud.com/vulnerabilities/16502 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2

CVE-2003-1031 – vBulletin 3.0 - 'register.php' HTML Injection

https://notcve.org/view.php?id=CVE-2003-1031

Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php de vBulletin 3.0 Beta 2 permite a atacantes remotos inyectar HTML arbitrario o script web mediante campos opcionales como (1) "Intereses-Aficiones", (2) "Bigrafía", o (3) "Ocupación". • https://www.exploit-db.com/exploits/22990 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html •