5

CVE-2002-2235

Exploit

member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.

Data is provided by the National Vulnerability Database (NVD)
Jelsoft ≫ Vbulletin Version2.0
Jelsoft ≫ Vbulletin Version2.0.1
Jelsoft ≫ Vbulletin Version2.0.2
Jelsoft ≫ Vbulletin Version2.2.0
Jelsoft ≫ Vbulletin Version2.2.1
Jelsoft ≫ Vbulletin Version2.2.2
Jelsoft ≫ Vbulletin Version2.2.3
Jelsoft ≫ Vbulletin Version2.2.4
Jelsoft ≫ Vbulletin Version2.2.5
Jelsoft ≫ Vbulletin Version2.2.6
Jelsoft ≫ Vbulletin Version2.2.7
Jelsoft ≫ Vbulletin Version2.2.8
Jelsoft ≫ Vbulletin Version2.2.9
Jelsoft ≫ Vbulletin Version2.2.9_can
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.55% 0.668
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N