GCVE - cpe:2.3:a:vbulletin:vbulletin:3.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:vbulletin:vbulletin:3.6:*:*:*:*:*:*:*

part: a version: 3.6 update: *

Vendor	Vbulletin (`002a8cbf-7d43-58a0-9ee0-802b9d8095a5`)
Product	Vbulletin (`a3b5d96b-8a9a-5cea-a87e-7d390f5ca893`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-9469`	vulnerable	2026-06-08 05:06:11.844399	Details available Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3. Published: 2017-08-28T15:00:00.000Z Updated: 2024-08-06T13:47:41.431Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/72592 http://packetstormsecurity.com/files/130393/vBulletin-5.1.3-Cross-Site-Scripting.html http://seclists.org/fulldisclosure/2015/Feb/49	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4328`	not_vulnerable	2026-06-08 05:02:17.001916	Details available Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors. Published: 2012-08-14T22:00:00.000Z Updated: 2024-08-06T20:35:09.574Z Open on db.gcve.eu Reference links https://www.vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012 http://osvdb.org/81474 https://www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012 http://secunia.com/advisories/48917 http://www.securityfocus.com/bid/53226	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3184`	vulnerable	2026-06-08 04:50:33.341901	Details available Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE: this issue can be leveraged to execute arbitrary PHP code. Published: 2008-07-15T18:03:00.000Z Updated: 2024-08-07T09:28:41.727Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/494049/100/0/threaded http://secunia.com/advisories/30991 http://www.vbulletin.com/forum/showthread.php?t=277945 http://securityreason.com/securityalert/4000 http://www.securityfocus.com/bid/30134	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.