1688 matches found
CVE-2007-2908
Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...
CVE-2007-2911
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field GPC'search''datelineafter' variable, a related issue to CVE-2007-1573...
CVE-2007-2908
Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...
CVE-2007-2912
Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user...
CVE-2007-2912
CVE-2007-2912 affects Jelsoft vBulletin prior to 3.6.6. The issue arises when the system’s unauthenticated User Infraction Permissions feature is disabled, allowing remote attackers to view the infraction “red flag” for a deleted user. This constitutes an information-disclosure risk due to an acc...
CVE-2007-2908
The CVE-2007-2908 entry describes a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin’s calendar.php, exploitable to inject arbitrary HTML/Script via the title field during a single add action. Affected software is vBulletin prior to version 3.6.6. The underlying issue is an input han...
CVE-2007-2909
Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vbcalendar366xssfixplugin.xml update...
CVE-2007-2909
CVE-2007-2909 is an XSS vulnerability in Jelsoft vBulletin 3.6.x (before 3.6.7) affecting calendar.php, with the issue tied to the vb_calendar366_xss_fix_plugin.xml update. Affected software is Jelsoft vBulletin 3.6.x; the vulnerability allows remote injection of script/HTML via unspecified vecto...
CVE-2007-2911
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field GPC'search''datelineafter' variable, a related issue to CVE-2007-1573...
CVE-2007-2911
CVE-2007-2911 : A SQL injection in Jelsoft’s vBulletin admincp/attachment.php (before 3.6.6) allows remote authenticated administrators to execute arbitrary SQL via the "Attached After" field (GPC['search']['datelineafter']). This is related to CVE-2007-1573. Affected product/version: vBulletin p...
CVE-2007-2910
Cross-site scripting XSS vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb367xssfixplugin.xml update, a related issue to CVE-2007-2909...
CVE-2007-2910
CVE-2007-2909 and CVE-2007-2910 are XSS vulnerabilities in Jelsoft vBulletin 3.6.x before 3.6.7 (PL1). CVE-2007-2909 affects calendar.php; CVE-2007-2910 affects calendar.php as well (update vb_calendar366_xss_fix_plugin.xml for CVE-2007-2909, vb_367_xss_fix_plugin.xml for CVE-2007-2910). Root cau...
vbgsitemap-rfi.txt
============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage : Host4vb.com , Hack-Teach.Org...
vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities
No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...
vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== vBulletin vBGSiteMap 2.41 root Remote File Inclusion Vulnerabilities ======================================================================...
vBulletin vBGSiteMap 2.41 - 'root' Remote File Inclusion
============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage : Host4vb.com , Hack-Teach.Org...
vBulletin vBGSiteMap 2.41 - root Remote File Inclusion
vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...
vbulletin < 3.6.6 [permanent xss]
vendor site:http://www.vbulletin.com/ product:vbulletin 3.6.6 bug: permanent xss affected file: calendar.php risk : medium xss permanent must be loggued PoC : http://127.0.0.1/vbulletin/calendar.php?do=add&type=single&c=1 -- fill up the title field with : /titlescriptalertdocument.cookie/script...
vbul366-xss.txt
vendor site:http://www.vbulletin.com/ product:vbulletin fill up the title field with : alertdocument.cookie Event Date : some far away date ... like 2010 for exemple message : whatever . when it's done look at the :"Request Reminder for this Event" link. it looks like this:...
