Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2013-6129

Disclosure Date: October 19, 2013 (last updated October 05, 2023)
The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] parameters, as exploited in the wild in October 2013.
0
0
Attacker Value
Unknown

CVE-2011-5251

Disclosure Date: December 31, 2012 (last updated October 05, 2023)
Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a lostpw action.
0
0
Attacker Value
Unknown

CVE-2012-4686

Disclosure Date: August 28, 2012 (last updated October 05, 2023)
SQL injection vulnerability in announcement.php in vBulletin 4.1.10 allows remote attackers to execute arbitrary SQL commands via the announcementid parameter.
0
0
Attacker Value
Unknown

CVE-2012-4328

Disclosure Date: August 14, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.
0
0
Attacker Value
Unknown

CVE-2012-3844

Disclosure Date: July 03, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or HTML via a long string in the subject parameter when creating a post.
0
0