CVE-2004-1824 Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
MediumCVSS 4.3
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
Affected products
No affected product data has been published yet.
References
- 20021121 XSS bug in vBulletin mailing-list
- 20040316 JelSoft vBulletin Multiple XSS Vulnerabilities mailing-list
- 11142 patch third-party-advisory
- 1009440 vdb-entry
- vbulletin-memberlist-xss(10679) vdb-entry
- 4312 vdb-entry
- 6226 vdb-entry
- 9887 exploit vdb-entry
- vbulletin-showthread-xss(15495) vdb-entry