CVE-2006-6779

2006-12-28T00:28:00
ID CVE-2006-6779
Type cve
Reporter cve@mitre.org
Modified 2018-10-17T21:49:00

Description

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript. Successful exploitation requires the ability to upload SWF files, which is disabled by default, and must be enabled by site administrators.