Page 15 of 88 results (0.006 seconds)

CVSS: 5.0EPSS: 1%CPEs: 5EXPL: 2

CVE-2005-0429 – vBulletin 3.0.4 - 'forumdisplay.php' Code Execution

https://notcve.org/view.php?id=CVE-2005-0429

Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter. • https://www.exploit-db.com/exploits/818 https://www.exploit-db.com/exploits/820 http://marc.info/?l=bugtraq&m=110840807415315&w=2 http://www.securityfocus.com/bid/12542 •

CVSS: 4.3EPSS: 1%CPEs: 2EXPL: 4

CVE-2004-1823 – vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1823

Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php. • https://www.exploit-db.com/exploits/23822 https://www.exploit-db.com/exploits/23823 http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://secunia.com/advisories/11142 http://securitytracker.com/id?1009440 http://www.osvdb.org/4310 http://www.osvdb.org/4311 http://www.securityfocus.com/bid/9888 http://www.securityfocus.com/bid/9889 https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 3

CVE-2004-2076 – vBulletin 3.0 - 'search.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-2076

Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. • https://www.exploit-db.com/exploits/23691 http://www.securityfocus.com/archive/1/353869 http://www.securityfocus.com/bid/9656 https://exchange.xforce.ibmcloud.com/vulnerabilities/15208 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 1

CVE-2004-1515 – vBulletin - 'LAST.php' SQL Injection

https://notcve.org/view.php?id=CVE-2004-1515

SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. • https://www.exploit-db.com/exploits/631 http://marc.info/?l=bugtraq&m=110019198507100&w=2 •

CVSS: 4.3EPSS: 1%CPEs: 18EXPL: 2

CVE-2004-1824 – vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2004-1824

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. • https://www.exploit-db.com/exploits/22030 http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html http://marc.info/?l=bugtraq&m=107945556112453&w=2 http://secunia.com/advisories/11142 http://securitytracker.com/id?1009440 http://www.iss.net/security_center/static/10679.php http://www.osvdb.org/4312 http://www.securityfocus.com/bid/6226 http://www.securityfocus.com/bid/9887 https://exchange.xforce.ibmcloud.com/vulnerabilities/15495 •