CVE-2005-3023

Опубликовано: 21 сент. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php, (6) faq.php, (7) forum.php, (8) image.php, (9) language.php, (10) ranks.php, (11) replacement.php, (12) replacement.php, (13) template.php, (14) template.php, (15) usergroup.php, or (16) usertitle.php.

Ссылки

http://marc.info/?l=bugtraq&m=112715150320677&w=2
http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt
Exploit
Vendor Advisory
http://marc.info/?l=bugtraq&m=112715150320677&w=2
http://morph3us.org/advisories/20050917-vbulletin-3.0.8.txt
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*

cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00351

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-wpc7-qhwq-ppp4

github

почти 4 года назад