Описание
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
Ссылки
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*
cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00448
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.
EPSS
Процентиль: 63%
0.00448
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other