4.3
CVSSv2

CVE-2004-2288

Published: 31/12/2004 Updated: 05/09/2008
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote malicious users to spoof parts of a website via the loc parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

jelsoft vbulletin 2.0_rc3

jelsoft vbulletin 2.2.1

jelsoft vbulletin 2.2.6

jelsoft vbulletin 2.2.8

jelsoft vbulletin 2.3.0

jelsoft vbulletin 3.0_beta_3

jelsoft vbulletin 3.0_beta_5

jelsoft vbulletin 2.2.2

jelsoft vbulletin 2.2.3

jelsoft vbulletin 2.2.4

jelsoft vbulletin 2.2.5

jelsoft vbulletin 3.0_beta_7

jelsoft vbulletin 3.0_gamma

jelsoft vbulletin 1.0.1

jelsoft vbulletin 2.0.3

jelsoft vbulletin 2.3.2

jelsoft vbulletin 2.3.3

jelsoft vbulletin 2.3.4

jelsoft vbulletin 3.0_beta_2

jelsoft vbulletin 2.0_rc2

jelsoft vbulletin 2.2.0

jelsoft vbulletin 2.2.7

jelsoft vbulletin 2.2.9

jelsoft vbulletin 3.0_beta_4

jelsoft vbulletin 3.0_beta_6

Exploits

source: wwwsecurityfocuscom/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface The issue exists due to improper validation of user-supplied data Remote attackers may potentially exploit this issue, by convincing a VBulletin administrator to ...