vbseo vulnerabilities

Products

• vbseo 3

Latest vbseo CVEs

Newest publication first

1. CVE-2012-6666 vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.

   Published 2020-02-10

   Medium·CVSS 6.1 EPSS 0.86%

   vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.

2. CVE-2014-9463 functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.

   Published 2017-09-15

   High·CVSS 8.8 EPSS 16.0% Public exploit

   functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitormessage.php.

3. CVE-2010-1077 Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences i...

   Published 2010-03-23

   Medium·CVSS 6.8 EPSS 2.0% Public exploit

   Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.