Lucene search
MitreCVE-2004-1823HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1823
2005-05-1004:00:00
mitre
web.nvd.nist.gov
18
cve-2004-1823
cross-site scripting
xss
jelsoft vbulletin
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.017
Percentile
88.0%
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.
Affected configurations
Node
jelsoftvbulletinMatch3.0.0
ORjelsoftvbulletinMatch3.0.0_can4
Related
exploitdb
exploitdb
vBulletin 3.0 - 'showthread.php' Cross-Site Scripting
2004-03-16 00:00:00
vBulletin 3.0 - 'forumdisplay.php' Cross-Site Scripting
2004-03-16 00:00:00
nvd
nvd
CVE-2004-1823
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-1823
2005-05-10 04:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6
Confidence
High
EPSS
0.017
Percentile
88.0%
Related for CVE-2004-1823