6.8
CVSSv2

CVE-2003-0295

Published: 16/06/2003 Updated: 18/10/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in private.php for vBulletin 3.0.0 Beta 2 allows remote malicious users to inject arbitrary web script and HTML via the "Preview Message" capability.

Vulnerable Product Search on Vulmon Subscribe to Product

jelsoft vbulletin 3.0.0_beta_2

Exploits

source: wwwsecurityfocuscom/bid/7594/info A vulnerability has been reported in vBulletin 300 beta 2 The problem is said to occur due to insufficient sanitization of private messages As a result, an attacker may be capable of embedding malicious HTML or script code within a private message This code may be interpreted by a legitimate ...