vBulletin HTML Injection Vuln

Advisory Name : vBulletin HTML Injection Vulnerability Release Date : June 24,2004 Application : vBulletin Test On : 3.0.1 or others? Vendor : Jelsofthttp://www.vbulletin.com/ Discover : Cheng Peng Suapplesoupatmsn.com Intro: From vendor's website ,it says that ,vBulletin is a powerful, scalable...

vBulletin 3.0.1 - newreply.php?WYSIWYG_HTML Cross-Site Scripting

vBulletin 3.0.1 - newreply.php?WYSIWYGHTML Cross-Site Scripting source: https://www.securityfocus.com/bid/10602/info VBulletin is reported prone to an HTML injection vulnerability. This issue affects the 'newreply.php' and 'newthread.php' scripts. An attacker may exploit this issue by including...

vBulletin 1.0/2.x/3.0 - 'index.php' User Interface Spoofing

source: https://www.securityfocus.com/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface. The issue exists due to improper validation of user-supplied data. Remote attackers may potentially exploit th...

vBulletin 1.02.x3.0 - index.php User Interface Spoofing

vBulletin 1.02.x3.0 - index.php User Interface Spoofing source: https://www.securityfocus.com/bid/10362/info A weakness has been reported to exist in the VBulletin software that may allow an attacker to spoof parts of the VBulletin interface. The issue exists due to improper validation of...

vBulletin 2.x - private.php Cross-Site Scripting

vBulletin 2.x - private.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9940/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'ptivate.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for...

vBulletin 2.x - 'private.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9940/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'ptivate.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

JelSoft vBulletin Multiple XSS Vulnerabilities

Vendor : Jelsoft Enterprises URL : http://www.vbulletin.com Version : vBulletin 3.0.0 RC4 && Others Risk : Cross Site Scripting Description: vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language, backed with a blisteringly fast MySQL...

jelsoftvb.txt

Vendor : Jelsoft Enterprises URL : http://www.vbulletin.com Version : vBulletin 3.0.0 RC4 && Others Risk : Cross Site Scripting Description: vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language, backed with a blisteringly fast MySQL...

vBulletin 3.0 - showthread.php Cross-Site Scripting

vBulletin 3.0 - showthread.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9889/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'showthread.php' script. This issue is reportedly due to a failure to sanitize user input and so allo...

vBulletin 3.0 - forumdisplay.php Cross-Site Scripting

vBulletin 3.0 - forumdisplay.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9888/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'forumdisplay.php' script. This issue is reportedly due to a failure to sanitize user input and so...

vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9888/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'forumdisplay.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

vBulletin 3.0 - 'showthread.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/9889/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'showthread.php' script. This issue is reportedly due to a failure to sanitize user input and so allow for injection of HTML and script code that may...

vBulletin < 3.0.0 RC4 - Cross Site Scripting

vBulletin Cross Site Scripting Vendor: Jelsoft Enterprises Product: vBulletin Version: = 3.0.0 RC4 Website: http://www.vbulletin.com/ BID: 9887 9888 9889 9940 9943 Description: vBulletin is a powerful, scalable and fully customisable forums package for your web site. Based on the PHP language,...

vBulletin 3.0.0 RC4 - Cross Site Scripting

vBulletin 3.0.0 RC4 - Cross Site Scripting vBulletin Cross Site Scripting Vendor: Jelsoft Enterprises Product: vBulletin Version: = 3.0.0 RC4 Website: http://www.vbulletin.com/ BID: 9887 9888 9889 9940 9943 Description: vBulletin is a powerful, scalable and fully customisable forums package for...

CVE-2004-0091

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the regsite or possibly regsite parameter. NOTE: the vendor has disputed this issue, saying...

CVE-2003-1031

Cross-site scripting XSS vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as 1 "Interests-Hobbies", 2 "Biography", or 3 "Occupation."...

vBulletin search.php query Parameter XSS

There is a cross-site scripting issue in vBulletin that may allow an attacker to steal a user's cookies. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid12058; scriptversion"1.24"; scriptcveid"CVE-2004-2076";...

Cross Site Scripting in VBulletin forum software

Client side execution of malicious scripts cross-site scripting Test Impact Customer session and cookies may be compromised. The attacker may be able to pose as a legitimate user to view and alter user records, and perform transactions as that user. From the polarised perspective, a user may only...

vBulletin PHP Forum Version

Software: vBulletin PHP Forum Version Vendor: Jelsoft Enterprises Ltd http://www.vbulletin.com Versions: 3.0.0 Release Candidate 4 Platforms: Unix/Windows Bug: Cross Site Scripting Vulnerabillity Risk: Low Exploitation: Remote with browser Date: 24 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail:...

vBulletin 3.0 - search.php Cross-Site Scripting

vBulletin 3.0 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9656/info It has been reported that VBulletin is prone to a cross-site scripting vulnerability in the 'search.php' script. This issue is reportedly due to a failure to sanitize user input and so allow HTML a...