4.3

CVE-2006-0080

Exploit
Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jelsoft ≫ Vbulletin Version3.5.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.46% 0.702
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://kapda.ir/advisory-177.html
Vendor Advisory
Exploit
http://secunia.com/advisories/18299
http://www.osvdb.org/22210
http://www.osvdb.org/22220
http://www.securityfocus.com/archive/1/420663/100/0/threaded
http://www.securityfocus.com/archive/1/421310/100/0/threaded
http://www.securityfocus.com/bid/16116
http://www.vupen.com/english/advisories/2006/0033