Lucene search

[email protected]CVE-2011-5251

HistoryDec 31, 2012 - 8:55 p.m.

CVE-2011-5251

2012-12-3120:55:00

CWE-20

[email protected]

web.nvd.nist.gov

vbulletin

cve-2011-5251

security

vulnerability

open redirect

forum

nvd

6.9 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.

CPENameOperatorVersion
vbulletin:vbulletinvbulletineq4.0.4
vbulletin:vbulletinvbulletineq4.1.1
vbulletin:vbulletinvbulletinle4.1.3
vbulletin:vbulletinvbulletineq4.0.8
vbulletin:vbulletinvbulletineq4.0.2
vbulletin:vbulletinvbulletineq4.0.1
vbulletin:vbulletinvbulletineq4.0.3
vbulletin:vbulletinvbulletineq4.0.7
vbulletin:vbulletinvbulletineq4.0.6
vbulletin:vbulletinvbulletineq4.1

CPE	Name	Operator	Version
vbulletin:vbulletin	vbulletin	eq	4.0.4
vbulletin:vbulletin	vbulletin	eq	4.1.1
vbulletin:vbulletin	vbulletin	le	4.1.3
vbulletin:vbulletin	vbulletin	eq	4.0.8
vbulletin:vbulletin	vbulletin	eq	4.0.2
vbulletin:vbulletin	vbulletin	eq	4.0.1
vbulletin:vbulletin	vbulletin	eq	4.0.3
vbulletin:vbulletin	vbulletin	eq	4.0.7
vbulletin:vbulletin	vbulletin	eq	4.0.6
vbulletin:vbulletin	vbulletin	eq	4.1

Rows per page:

1-10 of 131

References

www.vbulletin.com/forum/showthread.php/381014-Potential-Phishing-Vector?p=2166441

6.9 Medium

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2011-5251

cvelist1 packetstorm1 prion1