1687 matches found
[img]-vulnerability in vBulletin Version 2.2.2 & 2.2.1 & maybe olders
Hi I've discovered a vulnerability in the vBulletins's img-Tag implementation, that allows users to inject vbs-code in posts and private messages img is switched on by default. Through that, an attacker is able to steal other users cookies and maybe hijack their accounts. The following code sends...
Fairly serious vulnerability in vBulletin 2.2.0
This is my first report to bugtraq, I hope this is useful. This has been tested on vBulletin version 2.2.0. The vendor is CC'd on this message. I would imagine this applies to many products, not just the vbulletin, which I would like to say is more secure than most. ------------ The Exploit:...
CVE-2001-0475
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter...
CVE-2001-0475
Vulnerability in vBulletin (Jelsoft) allows remote code execution by exploiting an uninitialized PHP variable used to store template information. An attacker can craft special requests via the templatecache parameter to execute arbitrary PHP code on the server through the vBulletin PHP script. Th...
CVE-2001-0475
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter...
vBulletin allows arbitrary code execution
OVERVIEW ======== vBulletin http://www.vbulletin.com is a commonly used web forum system written in PHP. One of its key features is use of templates, which allow the board administrator to dynamically modify the look of the board. vBulletin templates are parsed with the eval function. This could ...