GCVE - cpe:2.3:a:jelsoft:vbulletin:3.6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jelsoft:vbulletin:3.6.0:*:*:*:*:*:*:*

part: a version: 3.6.0 update: *

Vendor	Jelsoft (`a1aea8a5-a68d-5cee-b31b-dd71f1d6156f`)
Product	Vbulletin (`6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-1292`	vulnerable	2026-06-08 04:49:42.007474	Details available SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almost impossible to achieve." Published: 2007-03-07T00:00:00.000Z Updated: 2024-08-07T12:50:35.050Z Open on db.gcve.eu Reference links http://osvdb.org/33835 http://www.vbulletin.com/forum/showthread.php?postid=1314422 http://secunia.com/advisories/24341 https://exchange.xforce.ibmcloud.com/vulnerabilities/32746 https://www.exploit-db.com/exploits/3387	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6779`	vulnerable	2026-06-08 04:49:29.728386	Details available Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript. Published: 2006-12-28T00:00:00.000Z Updated: 2024-08-07T20:42:06.520Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/455265/100/0/threaded http://www.securityfocus.com/bid/21736 http://www.securityfocus.com/archive/1/455351/100/0/threaded http://securityreason.com/securityalert/2084 http://www.securityfocus.com/archive/1/455414/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6040`	vulnerable	2026-06-08 04:49:21.840781	Details available Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a savenavprefs action. Published: 2006-11-22T00:00:00.000Z Updated: 2024-08-07T20:12:31.432Z Open on db.gcve.eu Reference links http://www.vbulletin.com/forum/showthread.php?postid=1256434 http://secunia.com/advisories/23011 http://www.securityfocus.com/bid/21157 https://exchange.xforce.ibmcloud.com/vulnerabilities/30408 http://www.vupen.com/english/advisories/2006/4599	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4273`	vulnerable	2026-06-08 04:49:17.449955	Details available Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML by uploading an attachment with a .pdf extension that contains JavaScript, which is processed as script by Microsoft Internet Explorer 6. Published: 2006-08-21T21:00:00.000Z Updated: 2024-08-07T19:06:06.506Z Open on db.gcve.eu Reference links http://www.osvdb.org/27778 http://www.securityfocus.com/archive/1/442488/100/200/threaded http://archives.neohapsis.com/archives/bugtraq/2006-08/0074.html http://archives.neohapsis.com/archives/bugtraq/2006-08/0082.html http://www.securityfocus.com/bid/19334	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.