Published: 21/09/2005 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 460

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin prior to 3.0.9 allow remote malicious users to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jelsoft vbulletin 2.2.1
jelsoft vbulletin 2.2.2
jelsoft vbulletin 2.3.0
jelsoft vbulletin 2.3.2
jelsoft vbulletin 3.0.4
jelsoft vbulletin 3.0.5
jelsoft vbulletin 3.0_beta_4
jelsoft vbulletin 3.0_beta_5
jelsoft vbulletin 3.0_beta_6
jelsoft vbulletin 1.0.1
jelsoft vbulletin 2.2.3
jelsoft vbulletin 2.2.4
jelsoft vbulletin 2.2.5
jelsoft vbulletin 2.3.3
jelsoft vbulletin 2.3.4
jelsoft vbulletin 3.0.6
jelsoft vbulletin 3.0.7
jelsoft vbulletin 2.0_rc3
jelsoft vbulletin 2.2.0
jelsoft vbulletin 2.2.8
jelsoft vbulletin 2.2.9
jelsoft vbulletin 3.0.2
jelsoft vbulletin 3.0.3
jelsoft vbulletin 3.0_beta_2
jelsoft vbulletin 3.0_beta_3
jelsoft vbulletin 3.0_beta_7
jelsoft vbulletin 3.0_gamma
jelsoft vbulletin 2.0.3
jelsoft vbulletin 2.0_rc2
jelsoft vbulletin 2.2.6
jelsoft vbulletin 2.2.7
jelsoft vbulletin 3.0
jelsoft vbulletin 3.0.1
jelsoft vbulletin 3.0.8
jelsoft vbulletin 3.0.9

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in ...

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user ...

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the ...

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user i ...

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the co ...

source: wwwsecurityfocuscom/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities These issues are due to a failure in the application to properly sanitize user-supplied input An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in th ...

NVD-CWE-Other http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt http://www.securityfocus.com/bid/14874 http://secunia.com/advisories/16873/http://marc.info/?l=bugtraq&m=112715150320677&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/22324 https://nvd.nist.gov https://www.exploit-db.com/exploits/26281/

CVE-2005-3020

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect