Approved changes feed: RSS · Atom

cpe:2.3:a:jelsoft:vbulletin:3.6.1:*:*:*:*:*:*:*

part: a version: 3.6.1 update: *

VendorJelsoft (a1aea8a5-a68d-5cee-b31b-dd71f1d6156f)
ProductVbulletin (6a9e181e-ed68-5b6f-87bf-8f1b3f688bbc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-1292 vulnerable 2026-06-08 04:49:42.008033 Details available
SQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5 in the 3.6.x series, might allow remote authenticated users to execute arbitrary SQL commands via the postids parameter. NOTE: the vendor states that the attack is feasible only in circumstances "almost impossible to achieve."
Published: 2007-03-07T00:00:00.000Z
Updated: 2024-08-07T12:50:35.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6779 vulnerable 2026-06-08 04:49:29.728892 Details available
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript.
Published: 2006-12-28T00:00:00.000Z
Updated: 2024-08-07T20:42:06.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-6040 vulnerable 2026-06-08 04:49:21.841976 Details available
Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a savenavprefs action.
Published: 2006-11-22T00:00:00.000Z
Updated: 2024-08-07T20:12:31.432Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.