91 matches found
EUVD-2006-6762
Malware in sbrugna...
EUVD-2007-2904
Malware in sbrugna...
EUVD-2004-1816
Malware in sbrugna...
EUVD-2007-1289
Malware in sbrugna...
EUVD-2007-2902
Malware in sbrugna...
EUVD-2004-1817
Malware in sbrugna...
EUVD-2006-2336
Malware in sbrugna...
EUVD-2007-2901
Malware in sbrugna...
EUVD-2006-6023
Malware in sbrugna...
EUVD-2001-0471
Malware in sbrugna...
CVE-2004-2288
Cross-site scripting XSS vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter...
CVE-2004-2695
SQL injection vulnerability in the Authorize.net callback code subscriptions/authorize.php in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the xinvoicenum parameter. NOTE: this issue might be related to CVE-2006-4267...
CVE-2004-2695
The CVE-2004-2695 entry describes an SQL injection in Jelsoft vBulletin 3.0–3.0.3, exploitable via the x_invoice_num parameter in subscriptions/authorize.php. This allows remote attackers to execute arbitrary SQL statements. The CVE entry notes a possible relation to CVE-2006-4267, which is indep...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...
CVE-2007-4120
Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...
CVE-2007-4120
Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...
CVE-2007-4120
CVE-2007-4120 affects Jelsoft vBulletin 3.6.5: multiple PHP remote file inclusion vulnerabilities in includes/functions.php (classfile), includes/functions_cron.php (nextitem), and includes/functions_forumdisplay.php (specialtemplates). The underlying cause is insecure URL handling that could all...
Cross site scripting
Cross-site scripting XSS vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb367xssfixplugin.xml update, a related issue to CVE-2007-2909...
Design/Logic Flaw
Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user...
Cross site scripting
Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...