CVE-2007-1573

CVE-2007-1573 affects Jelsoft vBulletin 3.6.5. The vulnerability is an SQL injection in admincp/attachment.php via the Attached Before field, enabling remote authenticated administrators to execute arbitrary SQL commands. The connected sources cite the same vector and impact; no patch/version rem...

CVE-2007-1573: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached Before" field...

CVE-2007-1342: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the add rss url form...

vbul365-rssxss.txt

vBulletin® v3.6.5 has an xss vuln in admincp/index.php in rss feed . exactlly in add rss url by adding : "alertdocument.cookie; a cool messege box appear with cookies ; earlier versions affected also . ----------------------------------------------------------------------------- Discovered by...

vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln.

vBulletin® v3.6.5 has an xss vuln in admincp/index.php in rss feed . exactlly in add rss url by adding : "scriptalertdocument.cookie;/script a cool messege box appear with cookies ; earlier versions affected also . -----------------------------------------------------------------------------...

CVE-2007-0869

CVE-2007-0869 affects Jelsoft vBulletin 3.6.4: an XSS vulnerability in the Attachment Manager (admincp/attachment.php) allows remote attackers to inject arbitrary script/HTML via the Extension field. The entry cites a possible duplicate of CVE-2007-0830 and notes uncertain provenance (information...

CVE-2007-0869: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Attachment Manager admincp/attachment.php in Jelsoft vBulletin 3.6.4 allows remote attackers to inject arbitrary web script or HTML via the Extension field. NOTE: this might be a duplicate of CVE-2007-0830.5. NOTE: the provenance of this information i...

CVE-2007-0830

CVE-2007-0830 documents multiple XSS vulnerabilities in the Admin Control Panel of vBulletin 3.6.4. The issues allow remote authenticated administrators to inject arbitrary script/HTML via various AdminCP managers (User Group/Rank/Title, BB Code, Attachment, Calendar, Forums & Moderators). Vendor...

PT-2007-2273 · Vbulletin · Vbulletin

Name of the Vulnerable Software and Affected Versions: vBulletin version 3.6.4 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the Admin Control Panel AdminCP of vBulletin. These vulnerabilities allow remote authenticated administrators to inject arbitrary web...

CVE-2006-6040

CVE-2006-6040 affects Jelsoft vBulletin 3.6.x, specifically admincp/index.php. The vulnerability is due to cross-site scripting (XSS) via two parameters: prefs in a buildnavprefs action and navprefs in a savenavprefs action, enabling remote attackers to inject arbitrary script/HTML. Public refere...

CVE-2006-6040: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via 1 the prefs parameter in a buildnavprefs action or 2 the navprefs parameter in a savenavprefs action...

CVE-2006-5561

The CVE refers to SQL injection in Discuz! GBK 5.0.0 via the cdb_auth cookie in admincp.php, enabling remote attackers to run arbitrary SQL commands. Affected software: Discuz! with GBK encoding, version 5.0.0. Root cause: unsafely parsed cookie value leads to SQL injection. Impact per sources: p...

CVE-2005-3025: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to 1 modcp/index.php or 2 admincp/index.php, or the ip parameter to 3 modcp/user.php or 4 admincp/usertitle.php...

vBulletin 1.0.1 lite2.x3.0 - admincpusertools.php?ids SQL Injection

vBulletin 1.0.1 lite2.x3.0 - admincpusertools.php?ids SQL Injection source: https://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in S...