CVE-2003-1031 Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2...

MediumCVSS 4.3 EPSS 1.4% Public exploit

Published: 2004-01-22 07:00
Updated: 2026-06-17 01:03
Exploit status: Public exploit available

Description

Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) "Interests-Hobbies", (2) "Biography", or (3) "Occupation."

Affected products

No affected product data has been published yet.

References

20030808 VBulletin New Member XSS Vulnerability exploit mailing-list vendor-advisory

CVSS v2.0

4.3 Medium

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: None
Integrity: Partial
Availability: None

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.39% (percentile 72.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

vBulletin 3.0 - 'register.php' HTML Injection Exploit · Exploit Database (OffSec) · 2003-08-06