4.3
CVSSv2

CVE-2005-4621

Published: 31/12/2005 Updated: 20/09/2008
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote malicious users to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.

Vulnerable Product Search on Vulmon Subscribe to Product

jelsoft vbulletin 2.2.6

jelsoft vbulletin 2.2.7

jelsoft vbulletin 2.2.8

jelsoft vbulletin 2.2.9

jelsoft vbulletin 2.3.0

jelsoft vbulletin 3.0.7

jelsoft vbulletin 3.0.8

jelsoft vbulletin 3.0.9

jelsoft vbulletin 3.0_beta_2

jelsoft vbulletin 2.0_rc2

jelsoft vbulletin 2.0_rc3

jelsoft vbulletin 2.2.0

jelsoft vbulletin 2.2.1

jelsoft vbulletin 3.0

jelsoft vbulletin 3.0.1

jelsoft vbulletin 3.0.10

jelsoft vbulletin 3.0.2

jelsoft vbulletin 3.0_beta_7

jelsoft vbulletin 3.0_gamma

jelsoft vbulletin 3.5.1

jelsoft vbulletin 2.0.3

jelsoft vbulletin 2.2.2

jelsoft vbulletin 2.2.4

jelsoft vbulletin 2.3.2

jelsoft vbulletin 2.3.4

jelsoft vbulletin 3.0.4

jelsoft vbulletin 3.0.6

jelsoft vbulletin 3.0_beta_3

jelsoft vbulletin 3.0_beta_5

jelsoft vbulletin 1.0.1

jelsoft vbulletin 2.2.3

jelsoft vbulletin 2.2.5

jelsoft vbulletin 2.3.3

jelsoft vbulletin 2.3.8

jelsoft vbulletin 3.0.3

jelsoft vbulletin 3.0.5

jelsoft vbulletin 3.0_beta_4

jelsoft vbulletin 3.0_beta_6