4.3

CVE-2006-0080

Exploit

EPSS 0.66%
Veröffentlicht 04.01.2006 06:03:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the title of an event, which is not properly filtered by (1) calendar.php and (2) reminder.php.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Jelsoft ≫ Vbulletin Version3.5.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.66%	0.686

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://kapda.ir/advisory-177.html

Vendor Advisory

Exploit

http://secunia.com/advisories/18299

http://www.osvdb.org/22210

http://www.osvdb.org/22220

http://www.securityfocus.com/archive/1/420663/100/0/threaded

http://www.securityfocus.com/archive/1/421310/100/0/threaded

http://www.securityfocus.com/bid/16116

http://www.vupen.com/english/advisories/2006/0033

https://nvd.nist.gov/vuln/detail/CVE-2006-0080

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-0080

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-0080

EUVD