Skip to content

CVE-2012-6667 Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter i...

MediumCVSS 6.1 EPSS 4.2% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action.

Affected products

ProductAffected versionsFixed in
dragonbyte-tech vbshout <= 6.2.18 No fix listed

References

  • 48525 third-party-advisory
  • 18644 exploit third-party-advisory vdb-entry
  • 52685 third-party-advisory vdb-entry