CVE-2012-6670

🗓️ 11 Jan 2018 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

XSS vulnerabilities in DragonByte vbActivity module before 3.0.1 for vBulletin

Reporter	Title	Published	Views	Family All 5
CNVD	DragonByte Technologies vbActivity for vBulletin Cross-Site Scripting Vulnerability	15 Jan 201800:00	–	cnvd
Cvelist	CVE-2012-6670	11 Jan 201820:00	–	cvelist
EUVD	EUVD-2012-6514	7 Oct 202500:30	–	euvd
NVD	CVE-2012-6670	11 Jan 201820:29	–	nvd
Prion	Cross site scripting	11 Jan 201820:29	–	prion

NVD

Node

dragonbyte-tech vbactivity_moduleRange<3.0.1vbulletin

Source	Link
securityfocus	www.securityfocus.com/bid/52711
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/74346
secunia	www.secunia.com/advisories/48490
dragonbyte-tech	www.dragonbyte-tech.com/f4/vbactivity-vbshout-forumon-rpg-vbdownloads-vbquiz-updates-security-releases-6876/

Parameter	Position	Path	Description	CWE
reason	request body	/actions/nominatemedal.php	XSS via reason parameter in nominatemedal action	CWE-79
reason	request body	/actions/requestmedal.php	XSS via reason parameter in requestmedal action	CWE-79

21 Nov 2024 01:46Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00246

cve-2012-6670 cross-site scripting xss dragonbyte technologies vbactivity vbulletin nvd