Approved changes feed: RSS · Atom
cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*
part: a version: 2.2.6 update: *
| Vendor | Jelsoft (a1aea8a5-a68d-5cee-b31b-dd71f1d6156f) |
|---|---|
| Product | Vbulletin (6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-4621 |
vulnerable | 2026-06-08 04:48:44.462666 |
Details available
Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.
Published: 2006-01-06T11:00:00.000Z
Updated: 2024-08-07T23:53:28.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3025 |
vulnerable | 2026-06-08 04:48:31.206477 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the loc parameter to (1) modcp/index.php or (2) admincp/index.php, or the ip parameter to (3) modcp/user.php or (4) admincp/usertitle.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3024 |
vulnerable | 2026-06-08 04:48:31.205392 |
Details available
Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, the (2) thread[forumid] or (3) criteria parameters to thread.php, (4) userid parameter to user.php, the (5) calendarcustomfieldid, (6) calendarid, (7) moderatorid, (8) holidayid, (9) calendarmoderatorid, or (10) calendar[0] parameters to admincalendar.php, (11) the cronid parameter to cronlog.php, (12) user[usergroupid][0] parameter to email.php, (13) help[0] parameter to help.php, the (14) limitnumber or (15) limitstart parameter to user.php, the (16) usertitleid or (17) ids parameters to usertitle.php, (18) rvt[0] parameter to language.php, (19) keep[0] parameter to phrase.php, (20) dostyleid parameter to template.php, (21) thread[forumid] parameter to thread.php, or (22) usertools.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.401Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3023 |
vulnerable | 2026-06-08 04:48:31.204337 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php, (6) faq.php, (7) forum.php, (8) image.php, (9) language.php, (10) ranks.php, (11) replacement.php, (12) replacement.php, (13) template.php, (14) template.php, (15) usergroup.php, or (16) usertitle.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3022 |
vulnerable | 2026-06-08 04:48:31.203218 |
Details available
Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, (2) userid parameter to user.php, (3) calendar parameter to admincalendar.php, (4) cronid parameter to cronlog.php, (5) usergroupid parameter to email.php, (6) help parameter to help.php, (7) rvt parameter to language.php, (8) keep parameter to phrase.php, or (9) updateprofilepic parameter to usertools.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3021 |
vulnerable | 2026-06-08 04:48:31.202117 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3020 |
vulnerable | 2026-06-08 04:48:31.197381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3019 |
vulnerable | 2026-06-08 04:48:31.183526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0511 |
vulnerable | 2026-06-08 04:48:12.871299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-2288 |
vulnerable | 2026-06-08 04:48:09.135470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1824 |
not_vulnerable | 2026-06-08 04:48:07.761127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2235 |
vulnerable | 2026-06-08 04:47:19.477515 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1922 |
vulnerable | 2026-06-08 04:47:18.510840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.