CVE-2008-3184 Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the...
MediumCVSS 4.3
EPSS 1.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE: this issue can be leveraged to execute arbitrary PHP code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vbulletin | = 3.6 | No fix listed |
| vbulletin | = 3.6.1 | No fix listed |
| vbulletin | = 3.6.2 | No fix listed |
| vbulletin | = 3.6.3 | No fix listed |
| vbulletin | = 3.6.4 | No fix listed |
| vbulletin | = 3.6.5 | No fix listed |
| vbulletin | = 3.6.6 | No fix listed |
| vbulletin | = 3.6.7 | No fix listed |
| vbulletin | = 3.6.8 | No fix listed |
| vbulletin | = 3.6.9 | No fix listed |
| vbulletin | = 3.6.10 | No fix listed |
| vbulletin | = 3.6.10-pl1 | No fix listed |
| vbulletin | = 3.7.0 | No fix listed |
| vbulletin | = 3.7.1 | No fix listed |
| vbulletin | = 3.7.1-gold | No fix listed |
| vbulletin | = 3.7.1-pl1 | No fix listed |
| vbulletin | = 3.7.2 | No fix listed |
References
- 30991 third-party-advisory vendor-advisory
- 4000 third-party-advisory
- 20080708 XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower mailing-list
- 30134 vdb-entry
- www.vbulletin.com