EUVD-2001-0471

Malware in sbrugna...

EUVD-2004-1817

Malware in sbrugna...

EUVD-2007-2904

Malware in sbrugna...

EUVD-2006-2336

Malware in sbrugna...

EUVD-2007-2901

Malware in sbrugna...

EUVD-2004-1816

Malware in sbrugna...

EUVD-2006-6023

Malware in sbrugna...

EUVD-2006-6762

Malware in sbrugna...

EUVD-2007-1289

Malware in sbrugna...

EUVD-2007-2902

Malware in sbrugna...

CVE-2004-2288

Cross-site scripting XSS vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter...

CVE-2004-2695

The CVE-2004-2695 entry describes an SQL injection in Jelsoft vBulletin 3.0–3.0.3, exploitable via the x_invoice_num parameter in subscriptions/authorize.php. This allows remote attackers to execute arbitrary SQL statements. The CVE entry notes a possible relation to CVE-2006-4267, which is indep...

CVE-2004-2695

SQL injection vulnerability in the Authorize.net callback code subscriptions/authorize.php in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the xinvoicenum parameter. NOTE: this issue might be related to CVE-2006-4267...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

CVE-2007-4120

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

CVE-2007-4120

CVE-2007-4120 affects Jelsoft vBulletin 3.6.5: multiple PHP remote file inclusion vulnerabilities in includes/functions.php (classfile), includes/functions_cron.php (nextitem), and includes/functions_forumdisplay.php (specialtemplates). The underlying cause is insecure URL handling that could all...

CVE-2007-4120

Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 classfile parameter to includes/functions.php, the 2 nextitem parameter to includes/functionscron.php, and the 3 specialtemplates parameter to...

CVE-2007-2912

Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user...

Cross site scripting

Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vbcalendar366xssfixplugin.xml update...

Cross site scripting

Cross-site scripting XSS vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to inject arbitrary web script or HTML via the title field in a single add action...