1660 matches found
CVE-2018-12580
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session'useragent' in the "Login Sessions" feature...
Design/Logic Flaw
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session'useragent' in the "Login Sessions" feature...
CVE-2018-12580
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session'useragent' in the "Login Sessions" feature...
CVE-2018-12580
library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session'useragent' in the "Login Sessions" feature...
CVE-2018-12580
CVE-2018-12580 affects DragonByte vBSecurity 3.x up to 3.3.0 for vBulletin 3/4. The issue is a self-XSS in the Login Sessions feature caused by untrusted input in the session field $session['user_agent'], enabling an attacker to inject script/HTML. The Red Hat entry and CNVD/NVD records corrobora...
vBulletin Security Forum Setup - Hardening & Configuration
Document Title: =============== vBulletin Security Forum Setup - Hardening & Configuration References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2119 Download: https://www.vulnerability-lab.com/resources/documents/2119.txt Release Date: ============= 2018-02-20 Vulnerability...
vBulletin Forum Setup - Hardening & Configuration
Document Title: =============== vBulletin Forum Setup - Hardening & Configuration References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2119 Download: https://www.vulnerability-lab.com/resources/documents/2119.txt Release Date: ============= 2018-02-20 Vulnerability Laborato...
vBulletin 3.x, 4.2.x <= 4.2.5 'url' GET Parameter Open Redirect Vulnerability - Active Check
vBulletin is prone to an open redirect vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vbulletin:vbulletin";...
CVE-2018-6200
vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter...
Open redirect
vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter...
CVE-2018-6200
vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter...
CVE-2018-6200
CVE-2018-6200: vBulletin 3.x.x and 4.2.x up to 4.2.5 contain an open redirect via the redirector.php URL parameter. The nuclei template and related records describe an attacker redirecting users to a malicious site (potential phishing). Impact details in available documents note credential exposu...
CVE-2018-6200
vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.php url parameter...
vBulletin 'url' parameter open redirect vulnerability
vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . An open redirector vulnerability exists in vBulletin versions 3.x.x and 4.2.x through 4.2.5. An attacker can exploit this vulnerability by sending the 'url'...
DragonByte Technologies Forumon RPG for vBulletin Cross-Site Scripting Vulnerability
DragonByte Technologies Forumon RPG for vBulletin is a forum role-playing module for vBulletin, the open-source commercial Web forum program, from DragonByte Technologies of Scotland. A cross-site scripting vulnerability exists in DragonByte Technologies Forumon RPG for vBulletin version 1.0.7. A...
DragonByte Technologies vbActivity for vBulletin Cross-Site Scripting Vulnerability
DragonByte Technologies vbActivity for vBulletin is a module with polling and rating functionality for vBulletin, an open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in DragonByte Technologies vbActivity for vBulletin...
DragonByte Technologies vBDownloads for vBulletin Cross-Site Scripting Vulnerability
DragonByte Technologies vBDownloads for vBulletin is a download module for vBulletin open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the downloads/actions/editdownload.php file in DragonByte Technologies vBDownloads f...
DragonByte Technologies vBShout for vBulletin Cross-Site Scripting Vulnerability (CNVD-2018-02534)
DragonByte Technologies vBShout for vBulletin is a module with posting and replying functionality for vBulletin, the open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in DragonByte Technologies vBShout for vBulletin versio...
DragonByte Technologies vBShout for vBulletin Cross-Site Scripting Vulnerability
DragonByte Technologies vBShout for vBulletin is a module with posting and replying functionality for vBulletin, the open source commercial web forum program from DragonByte Technologies, Scotland. A cross-site scripting vulnerability exists in the vbshout.php file in DragonByte Technologies...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...