Approved changes feed: RSS · Atom
cpe:2.3:a:jelsoft:vbulletin:3.0.9:*:*:*:*:*:*:*
part: a version: 3.0.9 update: *
| Vendor | Jelsoft (a1aea8a5-a68d-5cee-b31b-dd71f1d6156f) |
|---|---|
| Product | Vbulletin (6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-4621 |
vulnerable | 2026-06-08 04:48:44.471533 |
Details available
Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject arbitrary web script or HTML via a URL in the remote avatar url field, in which the URL generates a parsing error, and possibly requiring a trailing extension such as .jpg.
Published: 2006-01-06T11:00:00.000Z
Updated: 2024-08-07T23:53:28.150Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3023 |
vulnerable | 2026-06-08 04:48:31.204611 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via certain arguments to (1) announcement.php, (2) admincalendar.php, (3) bbcode.php, (4) cronadmin.php, (5) email.php, (6) faq.php, (7) forum.php, (8) image.php, (9) language.php, (10) ranks.php, (11) replacement.php, (12) replacement.php, (13) template.php, (14) template.php, (15) usergroup.php, or (16) usertitle.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.395Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3022 |
vulnerable | 2026-06-08 04:48:31.203492 |
Details available
Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) announcement parameter to announcement.php, (2) userid parameter to user.php, (3) calendar parameter to admincalendar.php, (4) cronid parameter to cronlog.php, (5) usergroupid parameter to email.php, (6) help parameter to help.php, (7) rvt parameter to language.php, (8) keep parameter to phrase.php, or (9) updateprofilepic parameter to usertools.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.152Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3021 |
vulnerable | 2026-06-08 04:48:31.202402 |
Details available
image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3020 |
vulnerable | 2026-06-08 04:48:31.201266 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-08-07T22:53:30.172Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.