Show filters
119 Total Results
Displaying 41-50 of 119
Sort by:
Attacker Value
Unknown
CVE-2013-3522
Disclosure Date: May 10, 2013 (last updated October 05, 2023)
SQL injection vulnerability in index.php/ajax/api/reputation/vote in vBulletin 5.0.0 Beta 11, 5.0.0 Beta 28, and earlier allows remote authenticated users to execute arbitrary SQL commands via the nodeid parameter.
0
Attacker Value
Unknown
CVE-2011-5251
Disclosure Date: December 31, 2012 (last updated October 05, 2023)
Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.
0
Attacker Value
Unknown
CVE-2012-4686
Disclosure Date: August 28, 2012 (last updated October 05, 2023)
SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter.
0
Attacker Value
Unknown
CVE-2012-4328
Disclosure Date: August 14, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-3844
Disclosure Date: July 03, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or HTML via a long string in the subject parameter when creating a post.
0
Attacker Value
Unknown
CVE-2009-2230
Disclosure Date: June 26, 2009 (last updated October 04, 2023)
SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.
0
Attacker Value
Unknown
CVE-2008-6256
Disclosure Date: February 24, 2009 (last updated October 04, 2023)
SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinfo[recurring] parameter, a different vector than CVE-2005-3022.
0
Attacker Value
Unknown
CVE-2008-6255
Disclosure Date: February 24, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.
0
Attacker Value
Unknown
CVE-2008-4706
Disclosure Date: October 23, 2008 (last updated October 04, 2023)
SQL injection vulnerability in VBGooglemap Hotspot Edition 1.0.3, a vBulletin module, allows remote attackers to execute arbitrary SQL commands via the mapid parameter in a showdetails action to (1) vbgooglemaphse.php and (2) mapa.php.
0
Attacker Value
Unknown
CVE-2008-3773
Disclosure Date: August 22, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in vBulletin 3.7.2 PL1 and 3.6.10 PL3, when "Show New Private Message Notification Pop-Up" is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a private message subject (aka newpm[title]).
0
