Lucene search

[email protected]CVE-2005-3020

HistorySep 21, 2005 - 10:03 p.m.

CVE-2005-3020

2005-09-2122:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3020

vbulletin

xss

web script

html

security vulnerability

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.

CPENameOperatorVersion
jelsoft:vbulletinjelsoft vbulletineq2.2.0
jelsoft:vbulletinjelsoft vbulletineq2.0_rc2
jelsoft:vbulletinjelsoft vbulletineq3.0.4
jelsoft:vbulletinjelsoft vbulletineq3.0_beta_6
jelsoft:vbulletinjelsoft vbulletineq2.3.0
jelsoft:vbulletinjelsoft vbulletineq2.3.2
jelsoft:vbulletinjelsoft vbulletineq3.0.1
jelsoft:vbulletinjelsoft vbulletineq2.0_rc3
jelsoft:vbulletinjelsoft vbulletineq3.0.6
jelsoft:vbulletinjelsoft vbulletineq2.2.1

CPE	Name	Operator	Version
jelsoft:vbulletin	jelsoft vbulletin	eq	2.2.0
jelsoft:vbulletin	jelsoft vbulletin	eq	2.0_rc2
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.4
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0_beta_6
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.0
jelsoft:vbulletin	jelsoft vbulletin	eq	2.3.2
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.1
jelsoft:vbulletin	jelsoft vbulletin	eq	2.0_rc3
jelsoft:vbulletin	jelsoft vbulletin	eq	3.0.6
jelsoft:vbulletin	jelsoft vbulletin	eq	2.2.1

Rows per page:

1-10 of 351

References

marc.info/?l=bugtraq&m=112715150320677&w=2

morph3us.org/advisories/20050917-vbulletin-3.0.8.txt

secunia.com/advisories/16873/

www.securityfocus.com/bid/14874

exchange.xforce.ibmcloud.com/vulnerabilities/22324

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.011 Low

EPSS

Percentile

84.1%

JSON

Related for CVE-2005-3020

nessus1