Vbulletin@3.5.1 Security Vulnerabilities and Issues — Vbulletin@3.5.1 CVE List

Lucene search

JelsoftVbulletin3.5.1

4 matches found

CVE•added 2006/06/28 1:45 a.m.•37 views

CVE-2006-3253

Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run th...

2.6CVSS6.1AI score0.06148EPSS

CVE•added 2006/12/28 12:28 a.m.•37 views

CVE-2006-6779

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.

6.8CVSS6.1AI score0.00825EPSS

CVE•added 2006/01/06 11:0 a.m.•36 views

CVE-2005-4621

Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.

4.3CVSS6AI score0.00346EPSS

CVE•added 2006/04/18 10:2 a.m.•36 views

CVE-2006-1816

PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php.

5CVSS7.7AI score0.0194EPSS