Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-3020
HistorySep 21, 2005 - 10:03 p.m.

CVE-2005-3020

2005-09-2122:03:00
[email protected]
web.nvd.nist.gov
2

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.011

Percentile

84.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) group parameter to css.php, (2) redirect parameter to index.php, (3) email parameter to user.php, (4) goto parameter to language.php, (5) orderby parameter to modlog.php, and the (6) hex, (7) rgb, or (8) expandset parameter to template.php.

Affected configurations

Nvd
Node
jelsoftvbulletinMatch1.0.1lite
OR
jelsoftvbulletinMatch2.0.3
OR
jelsoftvbulletinMatch2.0_rc2
OR
jelsoftvbulletinMatch2.0_rc3
OR
jelsoftvbulletinMatch2.2.0
OR
jelsoftvbulletinMatch2.2.1
OR
jelsoftvbulletinMatch2.2.2
OR
jelsoftvbulletinMatch2.2.3
OR
jelsoftvbulletinMatch2.2.4
OR
jelsoftvbulletinMatch2.2.5
OR
jelsoftvbulletinMatch2.2.6
OR
jelsoftvbulletinMatch2.2.7
OR
jelsoftvbulletinMatch2.2.8
OR
jelsoftvbulletinMatch2.2.9
OR
jelsoftvbulletinMatch2.3.0
OR
jelsoftvbulletinMatch2.3.2
OR
jelsoftvbulletinMatch2.3.3
OR
jelsoftvbulletinMatch2.3.4
OR
jelsoftvbulletinMatch3.0
OR
jelsoftvbulletinMatch3.0.1
OR
jelsoftvbulletinMatch3.0.2
OR
jelsoftvbulletinMatch3.0.3
OR
jelsoftvbulletinMatch3.0.4
OR
jelsoftvbulletinMatch3.0.5
OR
jelsoftvbulletinMatch3.0.6
OR
jelsoftvbulletinMatch3.0.7
OR
jelsoftvbulletinMatch3.0.8
OR
jelsoftvbulletinMatch3.0.9
OR
jelsoftvbulletinMatch3.0_beta_2
OR
jelsoftvbulletinMatch3.0_beta_3
OR
jelsoftvbulletinMatch3.0_beta_4
OR
jelsoftvbulletinMatch3.0_beta_5
OR
jelsoftvbulletinMatch3.0_beta_6
OR
jelsoftvbulletinMatch3.0_beta_7
OR
jelsoftvbulletinMatch3.0_gamma
VendorProductVersionCPE
jelsoftvbulletin1.0.1cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*
jelsoftvbulletin2.0.3cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*
jelsoftvbulletin2.0_rc2cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*
jelsoftvbulletin2.0_rc3cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*
jelsoftvbulletin2.2.0cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*
jelsoftvbulletin2.2.1cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*
jelsoftvbulletin2.2.2cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*
jelsoftvbulletin2.2.3cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*
jelsoftvbulletin2.2.4cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*
jelsoftvbulletin2.2.5cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*
Rows per page:
1-10 of 351

Related

cvelist 1
exploitdb 6
cve 1
nessus 1
cvelist
cvelist
CVE-2005-3020
2005-09-21 04:00:00
exploitdb
exploitdb
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/template.php' Multiple Cross-Site Scripting Vulnerabilities
2005-09-19 00:00:00
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/css.php?group' Cross-Site Scripting
2005-09-19 00:00:00
vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php?email' Cross-Site Scripting
2005-09-19 00:00:00
cve
cve
CVE-2005-3020
2005-09-21 22:03:00
nessus
nessus
vBulletin <= 3.0.9 Multiple Vulnerabilities
2005-09-19 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.011

Percentile

84.4%

JSON
Related for NVD:CVE-2005-3020
cvelist1exploitdb6cve1nessus1