Описание
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-1040
- http://secunia.com/advisories/19100
- http://www.kapda.ir/advisory-266.html
- http://www.osvdb.org/23614
- http://www.securityfocus.com/archive/1/426537/100/0/threaded
- http://www.securityfocus.com/archive/1/426589/100/0/threaded
- http://www.securityfocus.com/bid/16919
- http://www.vbulletin.com/forum/showthread.php?postid=1079030
- http://www.vupen.com/english/advisories/2006/0808
EPSS
Процентиль: 76%
0.00949
Низкий
CVE ID
Связанные уязвимости
nvd
почти 20 лет назад
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web script or HTML via the email field, which is injected in profile.php but not sanitized in sendmsg.php.
EPSS
Процентиль: 76%
0.00949
Низкий