CVSS: 6.1EPSS: 0%CPEs: 35EXPL: 8CVE-2005-3020 – vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2005-3020
21 Sep 2005 — Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php. • https://www.exploit-db.com/exploits/26278 •
CVSS: 9.8EPSS: 82%CPEs: 29EXPL: 3CVE-2005-0511 – vBulletin misc.php Template Name Arbitrary Code Execution
https://notcve.org/view.php?id=CVE-2005-0511
21 Feb 2005 — misc.php for vBulletin 3.0.6 and earlier, when "Add Template Name in HTML Comments" is enabled, allows remote attackers to execute arbitrary PHP code via nested variables in the template parameter. • https://packetstorm.news/files/id/82364 •
CVSS: 9.8EPSS: 4%CPEs: 5EXPL: 2CVE-2005-0429 – vBulletin 3.0.4 - 'forumdisplay.php' Code Execution
https://notcve.org/view.php?id=CVE-2005-0429
15 Feb 2005 — Direct code injection vulnerability in forumdisplay.php in vBulletin 3.0 through 3.0.4, when showforumusers is enabled, allows remote attackers to execute inject arbitrary PHP commands via the comma parameter. • https://www.exploit-db.com/exploits/820 •
CVSS: 9.8EPSS: 0%CPEs: 12EXPL: 0CVE-2004-2695
https://notcve.org/view.php?id=CVE-2004-2695
31 Dec 2004 — SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter. NOTE: this issue might be related to CVE-2006-4267. • http://secunia.com/advisories/12531 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 1CVE-2004-1515 – vBulletin - 'LAST.php' SQL Injection
https://notcve.org/view.php?id=CVE-2004-1515
31 Dec 2004 — SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. • https://www.exploit-db.com/exploits/631 •
CVSS: 6.1EPSS: 1%CPEs: 2EXPL: 4CVE-2004-1823 – vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-1823
31 Dec 2004 — Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php. • https://www.exploit-db.com/exploits/23822 •
CVSS: 6.1EPSS: 1%CPEs: 18EXPL: 2CVE-2004-1824 – vBulletin 2.0/2.2.x - 'memberlist.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-1824
31 Dec 2004 — Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php. • https://www.exploit-db.com/exploits/22030 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 3CVE-2004-2076 – vBulletin 3.0 - 'search.php' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-2076
31 Dec 2004 — Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter. • https://www.exploit-db.com/exploits/23691 •
CVSS: 6.1EPSS: 0%CPEs: 25EXPL: 2CVE-2004-2288 – vBulletin 1.0/2.x/3.0 - 'index.php' User Interface Spoofing
https://notcve.org/view.php?id=CVE-2004-2288
31 Dec 2004 — Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter. • https://www.exploit-db.com/exploits/24124 •
CVSS: 6.1EPSS: 3%CPEs: 1EXPL: 2CVE-2004-0620 – vBulletin 3.0.1 - 'newreply.php?WYSIWYG_HTML' Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2004-0620
30 Jun 2004 — Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) newreply.php o (2) newthread.php en vBulletin 3.0.1 permite a atacantes remotos inyectar HTML arbitrario o script como otros usuarios mediante el panel edición. • https://www.exploit-db.com/exploits/24234 •