CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 2CVE-2003-1031 – vBulletin 3.0 - 'register.php' HTML Injection
https://notcve.org/view.php?id=CVE-2003-1031
Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation." Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php de vBulletin 3.0 Beta 2 permite a atacantes remotos inyectar HTML arbitrario o script web mediante campos opcionales como (1) "Intereses-Aficiones", (2) "Bigrafía", o (3) "Ocupación". • https://www.exploit-db.com/exploits/22990 http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html •
CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 0CVE-2004-0036
https://notcve.org/view.php?id=CVE-2004-0036
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter. Vulnerabilidad de inyección de SQL en calendar.php de vBulletin Forum 2.3.x permite a atacantes remotos robar información sensible mediante el parámetro eventid • http://marc.info/?l=bugtraq&m=107340358202123&w=2 http://www.osvdb.org/3344 http://www.securityfocus.com/bid/9360 http://www.vbulletin.com/forum/showthread.php?postid=588825 https://exchange.xforce.ibmcloud.com/vulnerabilities/14144 •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2003-0295 – vBulletin 3.0 - Private Message HTML Injection
https://notcve.org/view.php?id=CVE-2003-0295
Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote attackers to inject arbitrary web script and HTML via the "Preview Message" capability. Vulnerabilidad de secuencias de comandos en sitios cruzados en private.php for vBulletin 3.0.0 Beta 2 permite que atacantes remotos inyecten script web arbitrario y HTML mediante la funcionalidad "Preview Message". • https://www.exploit-db.com/exploits/22599 http://marc.info/?l=bugtraq&m=105292832607981&w=2 http://marc.info/?l=bugtraq&m=105293890422210&w=2 •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2002-1679
https://notcve.org/view.php?id=CVE-2002-1679
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message. • http://online.securityfocus.com/archive/1/253365 http://online.securityfocus.com/archive/1/253371 http://www.securityfocus.com/bid/4008 https://exchange.xforce.ibmcloud.com/vulnerabilities/8039 •
CVSS: 5.0EPSS: 0%CPEs: 14EXPL: 4CVE-2002-2235 – vBulletin 2.0.x/2.2.x - 'members2.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2002-2235
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks. • https://www.exploit-db.com/exploits/22042 http://online.securityfocus.com/archive/1/301076 http://securityreason.com/securityalert/3229 http://www.iss.net/security_center/static/10701.php http://www.securityfocus.com/bid/6246 • CWE-189: Numeric Errors •