EUVD-2014-3155

Malware in sbrugna...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vBulletin 5.1.1 Alpha 9 allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to privatemessage/new/, 2 the folderid parameter to a private message in privatemessage/view, 3 a fragment indicator to /help, or 4 the vie...

PT-2014-5110

Name of the Vulnerable Software and Affected Versions vBulletin version 5.1.1 Alpha 9 Description The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This can be achieved through various means, including the PATH INFO to...