Vbulletin@3.5.2 Security Vulnerabilities and Issues — Vbulletin@3.5.2 CVE List

Lucene search

JelsoftVbulletin3.5.2

4 matches found

CVE•added 2006/06/28 1:45 a.m.•37 views

CVE-2006-3253

Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run th...

2.6CVSS6.1AI score0.06148EPSS

CVE•added 2006/12/28 12:28 a.m.•37 views

CVE-2006-6779

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.

6.8CVSS6.1AI score0.00825EPSS

CVE•added 2006/04/18 10:2 a.m.•36 views

CVE-2006-1816

PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php.

5CVSS7.7AI score0.0194EPSS

CVE•added 2006/01/04 11:0 a.m.•34 views

CVE-2006-0080

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.

4.3CVSS5.8AI score0.00658EPSS