Page 2 of 51 results (0.002 seconds)

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-25118

https://notcve.org/view.php?id=CVE-2020-25118

The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager. El Admin CP en vBulletin versión 5.6.3, permite un ataque de tipo XSS por medio de un Título Style Options Settings en Styles Manager • https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-25119

https://notcve.org/view.php?id=CVE-2020-25119

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual. El Admin CP en vBulletin versión 5.6.3, permite un ataque de tipo XSS por medio de un Título de un Child Help Item en la parte de Login/Logoff del Manual del Usuario • https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-25120

https://notcve.org/view.php?id=CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI. El Admin CP en vBulletin versión 5.6.3, permite un ataque de tipo XSS por medio del URI admincp/search.php?do=dosearch • https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-25121

https://notcve.org/view.php?id=CVE-2020-25121

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options. El Admin CP en vBulletin versión 5.6.3, permite un ataque de tipo XSS por medio del campo Paid Subscription Email Notification en las Opciones • https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-25122

https://notcve.org/view.php?id=CVE-2020-25122

The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager. El Admin CP en vBulletin versión 5.6.3, permite un ataque de tipo XSS por medio de un Rank Type en User Rank Manager • https://pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •