CVE-2006-0080

2006-01-0411:00:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.3%

JSON

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.

References

kapda.ir/advisory-177.html

secunia.com/advisories/18299

www.osvdb.org/22210

www.osvdb.org/22220

www.securityfocus.com/archive/1/420663/100/0/threaded

www.securityfocus.com/archive/1/421310/100/0/threaded

www.securityfocus.com/bid/16116

www.vupen.com/english/advisories/2006/0033