4.3
CVSSv2

CVE-2004-2288

Published: 31/12/2004 Updated: 05/09/2008
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote malicious users to spoof parts of a website via the loc parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

jelsoft vbulletin 2.2.0

jelsoft vbulletin 2.0 rc2

jelsoft vbulletin 3.0 beta 6

jelsoft vbulletin 2.3.0

jelsoft vbulletin 2.3.2

jelsoft vbulletin 2.0 rc3

jelsoft vbulletin 2.2.1

jelsoft vbulletin 2.2.7

jelsoft vbulletin 2.0.3

jelsoft vbulletin 3.0 beta 7

jelsoft vbulletin 3.0 beta 3

jelsoft vbulletin 2.2.4

jelsoft vbulletin 3.0 beta 2

jelsoft vbulletin 2.2.2

jelsoft vbulletin 2.2.5

jelsoft vbulletin 2.2.6

jelsoft vbulletin 3.0 gamma

jelsoft vbulletin 2.2.9

jelsoft vbulletin 3.0 beta 4

jelsoft vbulletin 1.0.1

jelsoft vbulletin 2.2.8

jelsoft vbulletin 2.3.4

jelsoft vbulletin 2.2.3

jelsoft vbulletin 3.0 beta 5

jelsoft vbulletin 2.3.3

Exploits

source: wwwsecurityfocuscom/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface The issue exists due to improper validation of user-supplied data Remote attackers may potentially exploit this issue, by convincing a VBulletin administrator to ...