Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2006-6779

Disclosure Date: December 28, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.
0
0
Attacker Value
Unknown

CVE-2006-3253

Disclosure Date: June 28, 2006 (last updated November 08, 2023)
Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter. NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run through our filtering system as an unsigned integer.
0
0
Attacker Value
Unknown

CVE-2006-1816

Disclosure Date: April 18, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php.
0
0
Attacker Value
Unknown

CVE-2006-0080

Disclosure Date: January 04, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.
0
0