Approved changes feed: RSS · Atom
cpe:2.3:a:jelsoft:vbulletin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jelsoft (a1aea8a5-a68d-5cee-b31b-dd71f1d6156f) |
|---|---|
| Product | Vbulletin (6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2172 |
not_vulnerable | 2026-06-08 04:51:27.052531 |
Details available
Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter.
Published: 2009-06-23T21:21:00.000Z
Updated: 2024-08-07T05:44:55.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6754 |
not_vulnerable | 2026-06-08 04:51:04.786083 |
Details available
The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky.
Published: 2009-04-27T19:00:00.000Z
Updated: 2024-08-07T11:42:00.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2912 |
vulnerable | 2026-06-08 04:49:46.481736 |
Details available
Unspecified vulnerability in Jelsoft vBulletin before 3.6.6, when unauthenticated User Infraction Permissions is disabled, allows remote attackers to see the infraction "red flag" for a deleted user.
Published: 2007-05-30T10:00:00.000Z
Updated: 2024-08-07T13:57:54.679Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2911 |
vulnerable | 2026-06-08 04:49:46.481487 |
Details available
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field (GPC['search']['datelineafter'] variable), a related issue to CVE-2007-1573.
Published: 2007-05-30T10:00:00.000Z
Updated: 2024-08-07T13:57:54.559Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2910 |
vulnerable | 2026-06-08 04:49:46.481216 |
Details available
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_plugin.xml update, a related issue to CVE-2007-2909.
Published: 2007-05-30T10:00:00.000Z
Updated: 2024-08-07T13:57:54.019Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2909 |
vulnerable | 2026-06-08 04:49:46.480956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2908 |
vulnerable | 2026-06-08 04:49:46.480673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1573 |
vulnerable | 2026-06-08 04:49:42.900467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1342 |
vulnerable | 2026-06-08 04:49:42.115578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1292 |
vulnerable | 2026-06-08 04:49:42.006860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1660 |
vulnerable | 2026-06-08 04:46:24.223296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0475 |
vulnerable | 2026-06-08 04:45:20.329771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.