Lucene search
+L

5 matches found

CNVD
CNVD
•added 2018/01/15 12:00 a.m.•16 views

DragonByte Technologies Forumon RPG for vBulletin Cross-Site Scripting Vulnerability

DragonByte Technologies Forumon RPG for vBulletin is a forum role-playing module for vBulletin, the open-source commercial Web forum program, from DragonByte Technologies of Scotland. A cross-site scripting vulnerability exists in DragonByte Technologies Forumon RPG for vBulletin version 1.0.7. A...

6.1CVSS5.9AI score0.01642EPSS
SaveExploits0References1
Prion
Prion
•added 2018/01/11 8:29 p.m.•19 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

4.3CVSS6.1AI score0.01642EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2018/01/11 8:00 p.m.•45 views

CVE-2012-6671

DragonByte Technologies Forumon RPG for vBulletin (module) is affected by cross-site scripting in actions/main.php prior to version 1.0.8. The vulnerability allows remote attackers to inject arbitrary script/HTML via monster[title] or monster[description] when creating a new monster, indicating a...

6.1CVSS6AI score0.01642EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2018/01/11 8:00 p.m.•30 views

CVE-2012-6671

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

6.1AI score0.01642EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/11 12:00 a.m.•3 views

CVE-2012-6671: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the 1 monstertitle or 2 monsterdescription parameters...

6.1CVSS6.4AI score0.01642EPSS
SaveExploits0References2
Rows per page
Query Builder